Analysis

  • max time kernel
    166s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 02:14

General

  • Target

    853cae34b1d13639932945d46b15d09a98f17ceca5e0a1ec828082f4c3bc6962.exe

  • Size

    269KB

  • MD5

    11308c812a0720a377c57ccc51b41310

  • SHA1

    88d3bad95a2f137c690d06ceb3c16dc730712d08

  • SHA256

    853cae34b1d13639932945d46b15d09a98f17ceca5e0a1ec828082f4c3bc6962

  • SHA512

    70e86a813c6cfd62b6522e407c0c965dc61b10886b49057f81de169e5ebf5267d71c5043d519c4616835986ac8c55beac758886297db5aaa91a2b520614d65bf

  • SSDEEP

    6144:HSmod0C3smfRuuHZpsQ+DKhVc0jHx92IMs7ySdFwuC/W:cd02JvZgKhVcKHxMUuSdpC

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\853cae34b1d13639932945d46b15d09a98f17ceca5e0a1ec828082f4c3bc6962.exe
    "C:\Users\Admin\AppData\Local\Temp\853cae34b1d13639932945d46b15d09a98f17ceca5e0a1ec828082f4c3bc6962.exe"
    1⤵
      PID:5008
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 400
        2⤵
        • Program crash
        PID:1140
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 5008 -ip 5008
      1⤵
        PID:4412

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5008-132-0x0000000000400000-0x0000000000465000-memory.dmp

        Filesize

        404KB

      • memory/5008-133-0x0000000000400000-0x0000000000465000-memory.dmp

        Filesize

        404KB