Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:30

General

  • Target

    ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe

  • Size

    140KB

  • MD5

    d78ba016553c66c5e47275d5ae6ae6c5

  • SHA1

    f986fab573749f26efb419309bb9241aac62cdf8

  • SHA256

    ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15

  • SHA512

    2d33e685579a947aa2f0b239b5a1edc27c116f1fa145fc9a12ba211b77c0e5630b840c4bb8b695c7e4bf3736ab14751cdf568e9d0897385297b18fa4f2197125

  • SSDEEP

    3072:v32ts5kLHPgMT9/VAG/qZ4jiIrhRHKcucchFwyzTK:vGq2jLT9/24Xic8z

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe
    "C:\Users\Admin\AppData\Local\Temp\ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe"
    1⤵
      PID:1352
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1352 -s 500
        2⤵
        • Program crash
        PID:536
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1352 -ip 1352
      1⤵
        PID:2468

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1352-132-0x0000000000400000-0x0000000000424000-memory.dmp
        Filesize

        144KB