Analysis

  • max time kernel
    61s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:38

General

  • Target

    4b24941b390c5b54bee9653139107e36bf8186034b23c7fabda53349804dffe5.exe

  • Size

    748KB

  • MD5

    a30f67a5fb4de0a433d2450b27fab306

  • SHA1

    3a17c19b9fdaff4fb2caaae1223ff95a8ccc89ff

  • SHA256

    4b24941b390c5b54bee9653139107e36bf8186034b23c7fabda53349804dffe5

  • SHA512

    833caa4fcb0900ded15bc9acb737c4d2fd7eb7dcc5b5fb1569b1586cb1bd85f565003a6bf8721f917f308393eb46a2a161f508770b504d9c8d59b69020f06a52

  • SSDEEP

    12288:b2zRlm0UYzq6luGfOqVc0aeAJaLOAulMulX7I6bawW7DrCkeboqY1MyYjveXp9nz:b0+Yzq2VV+MLOAsMgXTba97DjebobMF4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b24941b390c5b54bee9653139107e36bf8186034b23c7fabda53349804dffe5.exe
    "C:\Users\Admin\AppData\Local\Temp\4b24941b390c5b54bee9653139107e36bf8186034b23c7fabda53349804dffe5.exe"
    1⤵
      PID:1960
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 528
        2⤵
        • Program crash
        PID:4844
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1960 -ip 1960
      1⤵
        PID:4608

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1960-132-0x0000000000881000-0x000000000088F000-memory.dmp
        Filesize

        56KB

      • memory/1960-133-0x00000000008DB000-0x000000000090B000-memory.dmp
        Filesize

        192KB

      • memory/1960-134-0x00000000022FE000-0x00000000023AC000-memory.dmp
        Filesize

        696KB