Analysis

  • max time kernel
    93s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:57

General

  • Target

    4a13d39de979a9afde82b3f0f3a64c54585dadc6066c038a0eb6cdf7ad1bc332.exe

  • Size

    384KB

  • MD5

    24037447c672c3ada5efa1dae1abc40f

  • SHA1

    d685985a0fb4dae8115a703003d657cf3970fb9c

  • SHA256

    4a13d39de979a9afde82b3f0f3a64c54585dadc6066c038a0eb6cdf7ad1bc332

  • SHA512

    30cb1261cc84bf0ba0602f257bbf6d525dacad4d1ad13bc5010c4937f59cafafb5af8888985540ffd74d622882ce30368278aabc70f625fc7c31d7b7959776d6

  • SSDEEP

    6144:LdcOw8EDvHeW55VLI/aDSABTMsFTMQh1tqbV/vA+Hghnns390EhvULzEgPUn/N:5uLX1LD9BTfFTllqbt4+AdSKv/PA

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a13d39de979a9afde82b3f0f3a64c54585dadc6066c038a0eb6cdf7ad1bc332.exe
    "C:\Users\Admin\AppData\Local\Temp\4a13d39de979a9afde82b3f0f3a64c54585dadc6066c038a0eb6cdf7ad1bc332.exe"
    1⤵
      PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 708
        2⤵
        • Program crash
        PID:4336
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 5060 -ip 5060
      1⤵
        PID:5044

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5060-132-0x0000000002240000-0x0000000002246000-memory.dmp

        Filesize

        24KB

      • memory/5060-133-0x0000000000400000-0x00000000004C9000-memory.dmp

        Filesize

        804KB