Overview

overview

10

Static

static

0a7362df71...45.exe

windows7-x64

10

0a7362df71...45.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    175s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/11/2022, 10:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0a7362df71a809e1e3249fd5e453f40a60e721d224879745facad826b123e045.exe

  • Size

    463KB

  • MD5

    98e372fe4c5f3bfb4e3dd4f877f84396

  • SHA1

    ea280b9f17cbe73db898f73ef8c8b58c72529051

  • SHA256

    0a7362df71a809e1e3249fd5e453f40a60e721d224879745facad826b123e045

  • SHA512

    cc28479cab4df52e946e44a6c32af1646b3394449c2e2c467c63ea503296e15653b1c6c2aa43099766631d941628988a0e498739beaac7995d047adfa494efff

  • SSDEEP

    6144:9pixqjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy3OGeyy:XixQeOkodHq9d+1U0rWSB7oCqB5Ea

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a7362df71a809e1e3249fd5e453f40a60e721d224879745facad826b123e045.exe
    "C:\Users\Admin\AppData\Local\Temp\0a7362df71a809e1e3249fd5e453f40a60e721d224879745facad826b123e045.exe"
    1⤵
      PID:4492
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 572
        2⤵
        • Program crash
        PID:3384
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4492 -ip 4492
      1⤵
        PID:3220
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4492 -ip 4492
        1⤵
          PID:5104
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4492 -ip 4492
          1⤵
            PID:4968

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • memory/4492-132-0x0000000002380000-0x0000000002385000-memory.dmp

                  Filesize

                  20KB

                  Download

                • memory/4492-133-0x0000000000400000-0x000000000053B000-memory.dmp

                  Filesize

                  1.2MB

                  Download