Analysis

  • max time kernel
    182s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 17:06

General

  • Target

    87d637730d2f40769523ed590c55de2b7be8e869564cd276798a6b2af57138a2.exe

  • Size

    257KB

  • MD5

    26fdec74df444af24f7f9ac7b454e98f

  • SHA1

    d80ea7a7ae3f32d0813755d060dff383ac9e3efa

  • SHA256

    87d637730d2f40769523ed590c55de2b7be8e869564cd276798a6b2af57138a2

  • SHA512

    9cb7d6675dc9e03cdd68df7ce468bf213479b46f9deb2e0a39b523c14b934ac01b426132c0eceb0628a4f1acdf221724170c2b2335557c189398983e9c5f3883

  • SSDEEP

    3072:GkR8h6hDaAyQIrZBbSJKJEIFUhASSknv7BYJlQXQ8p6gD73yQIAcC/Bu76hLy:GkR8h6lpYZJtU7hCJCpp6gD7PXq2y

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\87d637730d2f40769523ed590c55de2b7be8e869564cd276798a6b2af57138a2.exe
    "C:\Users\Admin\AppData\Local\Temp\87d637730d2f40769523ed590c55de2b7be8e869564cd276798a6b2af57138a2.exe"
    1⤵
      PID:3328
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3328 -s 332
        2⤵
        • Program crash
        PID:4284
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 3328 -ip 3328
      1⤵
        PID:1880

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3328-132-0x0000000000A20000-0x0000000000A3C000-memory.dmp

        Filesize

        112KB