Analysis

  • max time kernel
    91s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 04:07

General

  • Target

    5e6c8d96b4f6ce8a62fba238545175a9d0661bdf3c9074c65d1fa7e0cd1eedad.exe

  • Size

    75KB

  • MD5

    23658cea3897e7c3eeb9843c083def1e

  • SHA1

    ad80004d0e60038198d9686444b73102d4c784b7

  • SHA256

    5e6c8d96b4f6ce8a62fba238545175a9d0661bdf3c9074c65d1fa7e0cd1eedad

  • SHA512

    0a597ea59e8fd3e890ea6a6983f08513bac6782011407cb49a45cc00d32e18e558133f7cf1aee60c7d93e47dc94695e419dc8b69a17ba46b38a24852935bca49

  • SSDEEP

    768:YD39Hoa80i3JxRwRDCaI3lhjtDw/XZd9KbjobhB4Y2qYojopk6m+v:YD39Hoae3JxRwtCVwvNKH2hBrV6V

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e6c8d96b4f6ce8a62fba238545175a9d0661bdf3c9074c65d1fa7e0cd1eedad.exe
    "C:\Users\Admin\AppData\Local\Temp\5e6c8d96b4f6ce8a62fba238545175a9d0661bdf3c9074c65d1fa7e0cd1eedad.exe"
    1⤵
      PID:3868
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3868 -s 464
        2⤵
        • Program crash
        PID:4572
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3868 -ip 3868
      1⤵
        PID:3616

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3868-132-0x0000000000400000-0x000000000041D000-memory.dmp

        Filesize

        116KB