Analysis

  • max time kernel
    91s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 17:11

General

  • Target

    bf597b57da87fb158fcfd28189a93c029d81e1ea1cb67563629fbfb1b49c7f74.exe

  • Size

    372KB

  • MD5

    468fe4fc2a92165309d854de73700c50

  • SHA1

    ea5efa855532c55689c1b3b59aaf1bb7b7de2206

  • SHA256

    bf597b57da87fb158fcfd28189a93c029d81e1ea1cb67563629fbfb1b49c7f74

  • SHA512

    af4ab0cfd00de9c62ff2880cb2d3e48a80cc00417580c78e685844073800fde460f4ba74e2ebc6b875c269d8fbfc3601e3b04262f7e929d89b5b9f1268e52f5e

  • SSDEEP

    6144:tYn/Zyc5mFpvMTuGSouFQIlzBI1Iq3Fdrj6DUKSpFwv3K136:i/sc5mFpxzBI1X3Fdrj6DUKSpcK1K

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf597b57da87fb158fcfd28189a93c029d81e1ea1cb67563629fbfb1b49c7f74.exe
    "C:\Users\Admin\AppData\Local\Temp\bf597b57da87fb158fcfd28189a93c029d81e1ea1cb67563629fbfb1b49c7f74.exe"
    1⤵
      PID:4984
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 456
        2⤵
        • Program crash
        PID:4720
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4984 -ip 4984
      1⤵
        PID:4880

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4984-132-0x0000000000400000-0x000000000045E000-memory.dmp

        Filesize

        376KB

      • memory/4984-133-0x0000000000400000-0x000000000045E000-memory.dmp

        Filesize

        376KB