Analysis

  • max time kernel
    107s
  • max time network
    106s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    23-11-2022 07:22

General

  • Target

    d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7.exe

  • Size

    134KB

  • MD5

    f555cf6233d2fb11cbdf94da379f55ef

  • SHA1

    af45ed4cbfaaedeceae74bec7e1874569cdcd66e

  • SHA256

    d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7

  • SHA512

    02bce59a4bd6cf7170f1af24d719b4bccc45a4a6e73ea6a963b65efa90c244fb8e07e251cd258be1cea0dbd8fa951275e8b4bc94d01d484ea78d65af91149328

  • SSDEEP

    3072:5taiMEULOqvaRRZzFPk2I111KYTI1Uk16M:na5rOqva1HMzTy11

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7.exe
    "C:\Users\Admin\AppData\Local\Temp\d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7.exe"
    1⤵
      PID:4852
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4852 -s 516
        2⤵
        • Program crash
        PID:4312

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4852-116-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-117-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-118-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-119-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-120-0x0000000000400000-0x0000000000428000-memory.dmp

      Filesize

      160KB

    • memory/4852-121-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-122-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-123-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-124-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-125-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-126-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-127-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-128-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-129-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-130-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-131-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-132-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-133-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-134-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-135-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-136-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-137-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-138-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-139-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-140-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-141-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-143-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-142-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-145-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-147-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-148-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-146-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-144-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-149-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-150-0x0000000077600000-0x000000007778E000-memory.dmp

      Filesize

      1.6MB

    • memory/4852-151-0x0000000000400000-0x0000000000428000-memory.dmp

      Filesize

      160KB