Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 08:23

General

  • Target

    cdac981f87c3ab2d411f1f848c4830e8c6c6113f5bd0fabea1b1e05eaa123599.exe

  • Size

    241KB

  • MD5

    52d9ae988d0d62d939941937dc84d244

  • SHA1

    b3ff1d6f7dbca0ac56b7a522703806f86b5b75df

  • SHA256

    cdac981f87c3ab2d411f1f848c4830e8c6c6113f5bd0fabea1b1e05eaa123599

  • SHA512

    76e50321d2b93727eca5c888a64fc38255b05a8044630008d3343e637c2f00971f7a26fe4e736127e17ba47e8a587ce46a95c888cc3a73b4d687a2573624e20f

  • SSDEEP

    6144:f7x1gm7WeMr0zRaolcf5/kBI3x5O6i7Si2q:jx1b7Wv09o5/8fei

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cdac981f87c3ab2d411f1f848c4830e8c6c6113f5bd0fabea1b1e05eaa123599.exe
    "C:\Users\Admin\AppData\Local\Temp\cdac981f87c3ab2d411f1f848c4830e8c6c6113f5bd0fabea1b1e05eaa123599.exe"
    1⤵
      PID:4972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 336
        2⤵
        • Program crash
        PID:4544
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4972 -ip 4972
      1⤵
        PID:2800

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4972-132-0x0000000001000000-0x000000000115F000-memory.dmp

        Filesize

        1.4MB

      • memory/4972-133-0x0000000001000000-0x000000000115F000-memory.dmp

        Filesize

        1.4MB