Analysis

  • max time kernel
    185s
  • max time network
    207s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 05:17

General

  • Target

    92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe

  • Size

    108KB

  • MD5

    635ed6cf61aa5e72bb8251fae519fd23

  • SHA1

    db7a0291bae76d353d57f8af695e0d50782fdde7

  • SHA256

    92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e

  • SHA512

    01f695988a080733611d27d571490989706804da97b4e1628a5fdc31932d99dc0d81ab630062a1d61f0b816a476acbc49c60327639eeaff3ab08d42a576701ad

  • SSDEEP

    3072:WcGdpLFNnpVpEm08RADLG5Y4mNal2jowmI/Q2:DY9/p08RADLG5aal29Q2

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe
    "C:\Users\Admin\AppData\Local\Temp\92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe"
    1⤵
      PID:4144
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 392
        2⤵
        • Program crash
        PID:4912
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 392
        2⤵
        • Program crash
        PID:788
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4144 -ip 4144
      1⤵
        PID:228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4144 -ip 4144
        1⤵
          PID:4436

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads