Analysis

  • max time kernel
    195s
  • max time network
    220s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 16:47

General

  • Target

    f77cf9f1d3c9c2f7528b969f2d34d04e2e5359c2be66687ff5817ad797f8c766.exe

  • Size

    464KB

  • MD5

    d0537315d2c88ffe32dcfa2fe7499b65

  • SHA1

    0735672d10b2a3e7f10dc632cd51b61e3bbd2e11

  • SHA256

    f77cf9f1d3c9c2f7528b969f2d34d04e2e5359c2be66687ff5817ad797f8c766

  • SHA512

    504e58c427d2153881ecac319112f0670063baa66b2ea80259fe34541dfdde8c130f2e60402548104f942750d9736aaa2b35c09e9def146920c989b2bfeacae4

  • SSDEEP

    12288:K3FgD1EK5eOkodHq9d+1U0rWSB7oCqB5SlV:Ig5eAdK+1UqWeuK/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f77cf9f1d3c9c2f7528b969f2d34d04e2e5359c2be66687ff5817ad797f8c766.exe
    "C:\Users\Admin\AppData\Local\Temp\f77cf9f1d3c9c2f7528b969f2d34d04e2e5359c2be66687ff5817ad797f8c766.exe"
    1⤵
      PID:1660
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1660 -s 520
        2⤵
        • Program crash
        PID:32
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 1660 -ip 1660
      1⤵
        PID:4036

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1660-132-0x00000000005C0000-0x00000000005DD000-memory.dmp

        Filesize

        116KB

      • memory/1660-133-0x0000000000400000-0x0000000000537000-memory.dmp

        Filesize

        1.2MB