Analysis

  • max time kernel
    193s
  • max time network
    205s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:58

General

  • Target

    04494863370724c197af8d7eef28aec578190338f3becbba9c231e1f7e2b3858.exe

  • Size

    71KB

  • MD5

    eb1cbb8be5f3f1db5aa2a6da64bcbd92

  • SHA1

    08cf09f9536d21a574ae42f724720e9ba7a75065

  • SHA256

    04494863370724c197af8d7eef28aec578190338f3becbba9c231e1f7e2b3858

  • SHA512

    80e07a3100970d40c86e31b83aaab029cb5eea2fb610ea50582c5d766c5964d7ca914493d17314947c7cae3304dfbe6d598e4cfd1ecae1f2965c2739d30bcf6f

  • SSDEEP

    1536:cpcFruDCuqZep9g37PP92TfMw5PDSYJQJzbvKFyhr7YJxPe:cqFruD3NgLtgP5r7QJz7YYEPPe

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04494863370724c197af8d7eef28aec578190338f3becbba9c231e1f7e2b3858.exe
    "C:\Users\Admin\AppData\Local\Temp\04494863370724c197af8d7eef28aec578190338f3becbba9c231e1f7e2b3858.exe"
    1⤵
      PID:3984
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 252
        2⤵
        • Program crash
        PID:4188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 268
        2⤵
        • Program crash
        PID:3944
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3984 -ip 3984
      1⤵
        PID:2340
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 3984 -ip 3984
        1⤵
          PID:1012

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads