Overview

overview

3

Static

static

b08a0e9b22...03.exe

windows7-x64

3

b08a0e9b22...03.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 12:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b08a0e9b225c4c5d5a9d01377f062613816b0aeccb1e447647773b31cefb0503.exe

  • Size

    28KB

  • MD5

    660496890e1cc40a896ad8753358cb1b

  • SHA1

    23fa9aa3efc05be39f9231c27a28bcd0258b3350

  • SHA256

    b08a0e9b225c4c5d5a9d01377f062613816b0aeccb1e447647773b31cefb0503

  • SHA512

    ffd8c34ae50b4611bd0a109441a2d222d391c59cd8107ed5c6dcc261f742c6677a787d17dbfff14dd90aab328d9653c60e98be6c8ba1d59201ed0d0092724bb5

  • SSDEEP

    384:FoohNDWAKRSG8zc1IyA9P/1/Eh7oVipdTWpCn7Lq2BIFwRhXbNgmEx60pUxl2:fND5rAbA9P/BiY47Lq2BIidgx60pUxl2

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b08a0e9b225c4c5d5a9d01377f062613816b0aeccb1e447647773b31cefb0503.exe
    "C:\Users\Admin\AppData\Local\Temp\b08a0e9b225c4c5d5a9d01377f062613816b0aeccb1e447647773b31cefb0503.exe"
    1⤵
      PID:1312
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 264
        2⤵
        • Program crash
        PID:2320
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 268
        2⤵
        • Program crash
        PID:2608
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1312 -ip 1312
      1⤵
        PID:4556
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 1312 -ip 1312
        1⤵
          PID:1456

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1312-132-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB

          Download