Analysis

  • max time kernel
    179s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 15:49

General

  • Target

    6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe

  • Size

    573KB

  • MD5

    52c5589ea3cd195d7435c73b3d4393a6

  • SHA1

    ae7ae1aaac2c1d5a95b50255a19a30eba726747a

  • SHA256

    6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55

  • SHA512

    82c459d4640a94f0834864795acc3ebadd5be3e93403a5170a66fed32f29d1185ef59adb8f9a574f9f54806ccb7b047a2e890b4d3ca4a2404e33a69aed5139a0

  • SSDEEP

    12288:yYiVrMG6hZqjxpPdtjG+PD2Raoez/LSsPg:yvp6hZcjPFbTN3Sog

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe
    "C:\Users\Admin\AppData\Local\Temp\6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe"
    1⤵
      PID:1536
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 436
        2⤵
        • Program crash
        PID:4724
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1536 -ip 1536
      1⤵
        PID:1448

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1536-133-0x0000000000400000-0x0000000000495000-memory.dmp

        Filesize

        596KB

      • memory/1536-134-0x0000000000400000-0x0000000000495000-memory.dmp

        Filesize

        596KB