Analysis

  • max time kernel
    201s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/11/2022, 01:18

General

  • Target

    188e9a0a5de8bf54e5a6bc091866e485c926dff1a35c5f03dc37bb25804f41f8.exe

  • Size

    34KB

  • MD5

    1999febc70a870e216e6dc723321c110

  • SHA1

    7df90c4cc3678210a96aa2e9fad4bfd4c2dab715

  • SHA256

    188e9a0a5de8bf54e5a6bc091866e485c926dff1a35c5f03dc37bb25804f41f8

  • SHA512

    9bdfc0c43bb25c7a9a6bbacac0b0228115aefcc8c3e02c7444962ab6a4f01ebaefa441e46a8b90f75ea3dbb0adc7e159b3b4a3af157544a0a0911230406b74ab

  • SSDEEP

    768:Havt5FHGA/R8NDxWLmMOfpTeX8qCeiMG2t:HY/mA/RsWaMOfpTe1iMV

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\188e9a0a5de8bf54e5a6bc091866e485c926dff1a35c5f03dc37bb25804f41f8.exe
    "C:\Users\Admin\AppData\Local\Temp\188e9a0a5de8bf54e5a6bc091866e485c926dff1a35c5f03dc37bb25804f41f8.exe"
    1⤵
      PID:4188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4188 -s 468
        2⤵
        • Program crash
        PID:2532
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4188 -ip 4188
      1⤵
        PID:5048

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4188-132-0x0000000001000000-0x0000000001010000-memory.dmp

        Filesize

        64KB