Analysis

  • max time kernel
    153s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 13:32

General

  • Target

    9ec589231b7c2adf087d65f496c6ef04f5fa2d51850d026cdca4b57a3a0ec3a6.exe

  • Size

    126KB

  • MD5

    a3a8a45aa25e6171e33634e32a431683

  • SHA1

    4888cfd6834a6171d82305a952592bcf5c089257

  • SHA256

    9ec589231b7c2adf087d65f496c6ef04f5fa2d51850d026cdca4b57a3a0ec3a6

  • SHA512

    0ba4235532c5cf471f9a25ff121df185b216aba87aef21a8adf415e01042ea26b94ab6aa178f45f1ac80c3cf2a8d330bcb04643b8446495c247e614eb488ce62

  • SSDEEP

    1536:13L71KeIPYaNJwPDoDMhFaddOyaVqEUG/eVReZWhn0ranFw1JqtFuWScsY9MGMwS:13hIwErDVaVNkDEmFwit3lTS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9ec589231b7c2adf087d65f496c6ef04f5fa2d51850d026cdca4b57a3a0ec3a6.exe
    "C:\Users\Admin\AppData\Local\Temp\9ec589231b7c2adf087d65f496c6ef04f5fa2d51850d026cdca4b57a3a0ec3a6.exe"
    1⤵
      PID:2996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2996 -s 300
        2⤵
        • Program crash
        PID:2124
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2996 -ip 2996
      1⤵
        PID:3640

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2996-132-0x0000000000400000-0x0000000000422000-memory.dmp
        Filesize

        136KB

      • memory/2996-133-0x0000000000580000-0x00000000005AD000-memory.dmp
        Filesize

        180KB

      • memory/2996-134-0x0000000000580000-0x00000000005AD000-memory.dmp
        Filesize

        180KB