Analysis

  • max time kernel
    306s
  • max time network
    345s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 14:21

General

  • Target

    4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe

  • Size

    420KB

  • MD5

    03a3ba460df9e8fc378a3012647314fe

  • SHA1

    82824fce8c8a881b5ba445fce74bd62137f2e26c

  • SHA256

    4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01

  • SHA512

    08d5135b2d4d257efdad8e92899fcdcbbb3360a21a64b52ad000b02fe95fda18536b22a16cc598024826c68a399a6d57f55ed66e68e458360ca8166ba96974ee

  • SSDEEP

    12288:/kFnULIk9M22pZ2lqsCJzmRKyxNwrFLWCKsgqvX:/k1UL79M2a2cJJiRrxAWSg

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe
    "C:\Users\Admin\AppData\Local\Temp\4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe"
    1⤵
      PID:1888
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1888 -s 508
        2⤵
        • Program crash
        PID:4352
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1888 -ip 1888
      1⤵
        PID:1324

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1888-132-0x0000000000530000-0x000000000054D000-memory.dmp

        Filesize

        116KB

      • memory/1888-133-0x0000000000400000-0x00000000004C9000-memory.dmp

        Filesize

        804KB

      • memory/1888-134-0x0000000000530000-0x000000000054D000-memory.dmp

        Filesize

        116KB