Analysis

  • max time kernel
    69s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 03:25

General

  • Target

    5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe

  • Size

    494KB

  • MD5

    f58db47b591f43fadfa0e2a442648710

  • SHA1

    ac002729c594a94476632b0e1f818500cba70090

  • SHA256

    5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5

  • SHA512

    e0366acf7d82417e77b0d5da3ad7031372001a3fd9040ba27020f7e37cdbc89db0614d354f2411b56d349c1ee1a1419c9ae8b86bb91095483692c8e68bb8e9ee

  • SSDEEP

    12288:5jGnmWL1zVnTPnZAZL9a7wflRbGJ9zVz2Y:CVNOL9a7wfrS9zVz2Y

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe
    "C:\Users\Admin\AppData\Local\Temp\5bdd7bbe1ebb16bf8dbb73a7ac24d1f71f5ebaa1f4ed09723711b69d2d60a2a5.exe"
    1⤵
      PID:768
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 768 -s 568
        2⤵
        • Program crash
        PID:4788
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 768 -ip 768
      1⤵
        PID:3112

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/768-133-0x000000000069F000-0x00000000006A4000-memory.dmp
        Filesize

        20KB

      • memory/768-132-0x000000000069B000-0x00000000006A0000-memory.dmp
        Filesize

        20KB

      • memory/768-134-0x0000000000684000-0x000000000069B000-memory.dmp
        Filesize

        92KB