Analysis

  • max time kernel
    88s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 01:18

General

  • Target

    e0bc696a3ac8715fe95cf98105036f0ef2a7e303f736e13c77409ff2976d34da.exe

  • Size

    61KB

  • MD5

    07549d4a4e7765fb12987d080437d0e2

  • SHA1

    18cbc83c25f5aa048d7183efa29d4e9d2328a453

  • SHA256

    e0bc696a3ac8715fe95cf98105036f0ef2a7e303f736e13c77409ff2976d34da

  • SHA512

    0a764792049ebeefa9e09d4d352e9aeb7896c2876fb6702b6ba3d7a5946eccfaa586f21ae2c9894ae06f0b44515567e3d807175e4300a0f4acccc9b6506b8905

  • SSDEEP

    1536:jnfKyI9J2LJ3Jh991P6pX+QCXfUfCwh9YRPBMisKldPcAi29:e9J2LJ3Jh9ypXDCXfUfCwhC57Y2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0bc696a3ac8715fe95cf98105036f0ef2a7e303f736e13c77409ff2976d34da.exe
    "C:\Users\Admin\AppData\Local\Temp\e0bc696a3ac8715fe95cf98105036f0ef2a7e303f736e13c77409ff2976d34da.exe"
    1⤵
      PID:1300
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1300 -s 432
        2⤵
        • Program crash
        PID:4112
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1300 -ip 1300
      1⤵
        PID:4752

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1300-132-0x0000000001000000-0x0000000001014000-memory.dmp

        Filesize

        80KB

      • memory/1300-133-0x0000000001000000-0x0000000001014000-memory.dmp

        Filesize

        80KB