Analysis

  • max time kernel
    180s
  • max time network
    234s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 03:18 UTC

General

  • Target

    738e04fee141ca9a2103a345e267cccb84b10a038e344d0f5b13ebdc9a346080.exe

  • Size

    420KB

  • MD5

    7dda3df33113e1c532e2c4cdbe0af31b

  • SHA1

    9085cf53ff1620974289b6401791cb793c25582b

  • SHA256

    738e04fee141ca9a2103a345e267cccb84b10a038e344d0f5b13ebdc9a346080

  • SHA512

    cda5fc94fc93353bb83c8f2b94fe8ccdbdb7d7d5c87ce719dd94b7b957d7ecddac1259f88f656488f7d0842c9960d03f59914b78efcb8167704ea1b09e5ed974

  • SSDEEP

    6144:a8hbeHNyI7qy0LgPOcVHDnnY8bRZ+eHm+yn8vQ8w9ths+YMNoK2aZ3azO:Zh67q0jnnYUmqvEs+YMZ9Z3uO

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\738e04fee141ca9a2103a345e267cccb84b10a038e344d0f5b13ebdc9a346080.exe
    "C:\Users\Admin\AppData\Local\Temp\738e04fee141ca9a2103a345e267cccb84b10a038e344d0f5b13ebdc9a346080.exe"
    1⤵
      PID:928
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 928 -s 520
        2⤵
        • Program crash
        PID:2044
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 928 -ip 928
      1⤵
        PID:864

      Network

        No results found
      • 178.79.208.1:80
        260 B
        5
      • 13.89.179.8:443
        322 B
        7
      • 87.248.202.1:80
        322 B
        7
      • 67.27.153.126:80
        46 B
        40 B
        1
        1
      • 67.27.153.126:80
        46 B
        40 B
        1
        1
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/928-132-0x0000000000CE0000-0x0000000000CE6000-memory.dmp

        Filesize

        24KB

      • memory/928-133-0x0000000001000000-0x00000000010A6000-memory.dmp

        Filesize

        664KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.