Analysis

  • max time kernel
    272s
  • max time network
    342s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 15:56

General

  • Target

    658af2ba7e194930b61524e22a5e52a1916152bff32c3416013c07c921a4af8a.exe

  • Size

    263KB

  • MD5

    3537da3bc694b4276bdf73b0c2baa2e8

  • SHA1

    730978f8dae5c078874f6fb3c393eb28ac26f114

  • SHA256

    658af2ba7e194930b61524e22a5e52a1916152bff32c3416013c07c921a4af8a

  • SHA512

    9eaf061ca793c0f8e2e2aa173ff11e906d36807b8f23540e4aefbda0e2e5e5e9cf29efffd7a763a22ad7ce1825ac51fbb410c0807cc128d8e282fcd4eae41243

  • SSDEEP

    6144:A8LVxZz5s4Jjt/2BSbt56Y0syJwkiUCMskZjLf+oL9z:A85xZlsSjQBIT6Y0sLkiUCpsf+oL1

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\658af2ba7e194930b61524e22a5e52a1916152bff32c3416013c07c921a4af8a.exe
    "C:\Users\Admin\AppData\Local\Temp\658af2ba7e194930b61524e22a5e52a1916152bff32c3416013c07c921a4af8a.exe"
    1⤵
      PID:4180
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 448
        2⤵
        • Program crash
        PID:3836
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4180 -ip 4180
      1⤵
        PID:3932

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4180-132-0x00000000004E0000-0x00000000004FC000-memory.dmp

        Filesize

        112KB