Analysis

  • max time kernel
    175s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 15:33

General

  • Target

    691f6c6be4d8686fecebed833ad6b877361023aa3b109e9d82b4f36e6ffa8575.exe

  • Size

    5KB

  • MD5

    01acb1557696bdd91d609f572e260650

  • SHA1

    3c17702adb2a4ef9691e82337851c2e70b183d7a

  • SHA256

    691f6c6be4d8686fecebed833ad6b877361023aa3b109e9d82b4f36e6ffa8575

  • SHA512

    295977052606053435d1f77fb46f7c6aa50fcb7443f9071225f66a02a7f5483984ca7baddd40320ce7dd2e2ae7a805087b03eb60cfca6f878682636219de3d70

  • SSDEEP

    96:RwL/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpddsNd:0JIJaxdw9uRi5kmdYiBDqd

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\691f6c6be4d8686fecebed833ad6b877361023aa3b109e9d82b4f36e6ffa8575.exe
    "C:\Users\Admin\AppData\Local\Temp\691f6c6be4d8686fecebed833ad6b877361023aa3b109e9d82b4f36e6ffa8575.exe"
    1⤵
      PID:1280
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1280 -s 220
        2⤵
        • Program crash
        PID:1952
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1280 -s 224
        2⤵
        • Program crash
        PID:3004
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1280 -ip 1280
      1⤵
        PID:3688
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 1280 -ip 1280
        1⤵
          PID:3124

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1280-132-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB