Analysis

  • max time kernel
    151s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 13:04

General

  • Target

    cec9eea6f3035265eddcad12afb578e24e0493410dcd8b3c99f350b0a137ce8b.exe

  • Size

    70KB

  • MD5

    11710191bf60ec28fc9663a1a4d3894e

  • SHA1

    a3af28a8a3daaa656cecd3bd426d50a708c69f92

  • SHA256

    cec9eea6f3035265eddcad12afb578e24e0493410dcd8b3c99f350b0a137ce8b

  • SHA512

    95134a6022a8dee82dd010620acc2f72694b15ed568bebab8d988114afea7c43b2972f9dd4a067d4badf90914a14004e70ff90afaa2232aeab4cbdde4dda564c

  • SSDEEP

    1536:bZ8RKlt5i6CRLD65ysn8Ms1omfKY5yXUPKGsGc+8vu38e/DGUuy:bZ8RKVi6ursnMK+yXU2+8vjkDGU9

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cec9eea6f3035265eddcad12afb578e24e0493410dcd8b3c99f350b0a137ce8b.exe
    "C:\Users\Admin\AppData\Local\Temp\cec9eea6f3035265eddcad12afb578e24e0493410dcd8b3c99f350b0a137ce8b.exe"
    1⤵
      PID:1720
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 264
        2⤵
        • Program crash
        PID:2752
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 264
        2⤵
        • Program crash
        PID:3984
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1720 -ip 1720
      1⤵
        PID:4632
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1720 -ip 1720
        1⤵
          PID:1164

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads