Analysis

  • max time kernel
    151s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 19:14

General

  • Target

    ddf707d2374b178e427a3d3dec1f1f2976671a9df1f3b9877ae7116836cf60c1.exe

  • Size

    100KB

  • MD5

    52d7053db8449666afdb0df6a4c54aa1

  • SHA1

    73ff5f6fdd1db3c0803be4a0f7c75c3f272c51d6

  • SHA256

    ddf707d2374b178e427a3d3dec1f1f2976671a9df1f3b9877ae7116836cf60c1

  • SHA512

    3dfe52c62f7c3e0e8d3b9480e9dacb936c0d575641ce2f897229d48477ed6011b775979f00867c8ce3a58363b12328646c4df6c491c9a76174c5e649c37a2fa2

  • SSDEEP

    1536:NuaxIu6SY+A37feaCMJDmYsLIb4PvYqHB/AEgB:smt6SDADeak7dJHB/AVB

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddf707d2374b178e427a3d3dec1f1f2976671a9df1f3b9877ae7116836cf60c1.exe
    "C:\Users\Admin\AppData\Local\Temp\ddf707d2374b178e427a3d3dec1f1f2976671a9df1f3b9877ae7116836cf60c1.exe"
    1⤵
      PID:4744
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 408
        2⤵
        • Program crash
        PID:1680
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4744 -ip 4744
      1⤵
        PID:1360

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4744-132-0x0000000000400000-0x0000000000419000-memory.dmp

        Filesize

        100KB