Analysis

  • max time kernel
    151s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-11-2022 15:10

General

  • Target

    3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe

  • Size

    9.2MB

  • MD5

    3685bf179182825f79569a5ed730f586

  • SHA1

    db87834bd9183183085e2ec1880729a07b88059e

  • SHA256

    3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb

  • SHA512

    e5fccab9d05abe8f6838f582bc5326af15c9c12353a9062c47d85f6b76b2ee24e195154c1dbe622919a92414ddb933af16f3436d42575a6e892aa39d3f0150a3

  • SSDEEP

    196608:sVOMAQtJHQbegJtU6ZPYW251neAjnqjIxycT7B:kASQyRwYW239nqjMlV

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe
    "C:\Users\Admin\AppData\Local\Temp\3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe"
    1⤵
      PID:4236
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4236 -s 560
        2⤵
        • Program crash
        PID:5048
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4236 -ip 4236
      1⤵
        PID:3932

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4236-132-0x0000000000400000-0x0000000000D30000-memory.dmp

        Filesize

        9.2MB

      • memory/4236-133-0x0000000077290000-0x0000000077433000-memory.dmp

        Filesize

        1.6MB

      • memory/4236-134-0x0000000076B00000-0x0000000076D15000-memory.dmp

        Filesize

        2.1MB

      • memory/4236-136-0x0000000000400000-0x0000000000D30000-memory.dmp

        Filesize

        9.2MB