Analysis

  • max time kernel
    89s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 12:30

General

  • Target

    ac5c42f77dd51f56be243d86d57427f5078e145746998c8e7f4915660693e417.exe

  • Size

    337KB

  • MD5

    0f3a9ed6fba2a76230339962e6793346

  • SHA1

    223426255758ef3f30f29fb813f542cc7fff44ea

  • SHA256

    ac5c42f77dd51f56be243d86d57427f5078e145746998c8e7f4915660693e417

  • SHA512

    d3c87fcbfcb98ab96b341c7eed041ad234c8155fac24b0c36a5fd6c905d4f1533994269fbd12651e228ae93815bae3e16e200f810412a36ede162caa4e0b9a05

  • SSDEEP

    6144:LavYMc7shFjr9N/my+7Kojvkj+/LKgExnj4HDqLCXZtc:LavBc7sLjr9NC7XjD/LKRcDXXE

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ac5c42f77dd51f56be243d86d57427f5078e145746998c8e7f4915660693e417.exe
    "C:\Users\Admin\AppData\Local\Temp\ac5c42f77dd51f56be243d86d57427f5078e145746998c8e7f4915660693e417.exe"
    1⤵
      PID:4808
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4808 -s 560
        2⤵
        • Program crash
        PID:3692
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4808 -ip 4808
      1⤵
        PID:4536

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4808-132-0x0000000000700000-0x000000000072E000-memory.dmp

        Filesize

        184KB