Analysis

  • max time kernel
    189s
  • max time network
    196s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 23:05

General

  • Target

    6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe

  • Size

    65KB

  • MD5

    1222d54ffaf8a9767d8fd586e4713207

  • SHA1

    1f77d2be88928024a4b9203aac76093d3763bb26

  • SHA256

    6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1

  • SHA512

    e854e39c4f25dec82a07b36e7c95f4e5ce3533d4178f1438d70c4473b715e468922b974b841a14fa4c1ce518a88bdf2cb83f3153a14f2e3b3e7b6311060f6e64

  • SSDEEP

    1536:c/dvQFZ7Fxqlq+MLMRqyBpB+j5eBYGp4mh:c/dv2ZFxqMFyBpglYvim

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe
    "C:\Users\Admin\AppData\Local\Temp\6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe"
    1⤵
      PID:2152
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2152 -s 332
        2⤵
        • Program crash
        PID:3808
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2152 -ip 2152
      1⤵
        PID:3488

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2152-132-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB

      • memory/2152-133-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB