Analysis

  • max time kernel
    263s
  • max time network
    334s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 07:15

General

  • Target

    7c5de104c7fc1b1282435ef7fb2b44d043e91527753e80de51ce0ee5cf155602.exe

  • Size

    245KB

  • MD5

    1b26638737bbf2c8b51c5c126a3f0c80

  • SHA1

    fa8dde491089eaeb9306684ff3656ed18c0f5ccf

  • SHA256

    7c5de104c7fc1b1282435ef7fb2b44d043e91527753e80de51ce0ee5cf155602

  • SHA512

    187caa170dce67048179c478f5f8c9c20ff0823fb031dc555847426a11b1af5cf0994a29b817d9f2f2d3097edf5647d6e49a792f5286d08b88425237ea7ab4f2

  • SSDEEP

    3072:SR2xn3k0CdM1vabyzJYWqQa2ekgENqYj3B83VXtEiuvozxscqhTKL:SR2J0LS6VqG3buAzxe+

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c5de104c7fc1b1282435ef7fb2b44d043e91527753e80de51ce0ee5cf155602.exe
    "C:\Users\Admin\AppData\Local\Temp\7c5de104c7fc1b1282435ef7fb2b44d043e91527753e80de51ce0ee5cf155602.exe"
    1⤵
      PID:3144
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 460
        2⤵
        • Program crash
        PID:4544
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3144 -ip 3144
      1⤵
        PID:1568

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3144-132-0x0000000000400000-0x0000000000449000-memory.dmp

        Filesize

        292KB