Analysis

  • max time kernel
    149s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 07:33

General

  • Target

    7377c6aab42bc0bcfa548de5394b32ffebd6da6dd4bb565221c14b49bb7835b3.exe

  • Size

    32KB

  • MD5

    0972886dda1ed3796a03fa1896b1b15e

  • SHA1

    9db5e2100f1e8d7b8204b686ca7d4799d8d0ef09

  • SHA256

    7377c6aab42bc0bcfa548de5394b32ffebd6da6dd4bb565221c14b49bb7835b3

  • SHA512

    7c4cc1c33b84e62b206137d15476ca196ee2fa520d64ecd717038d649b0e98db97b4f46d0dcb2d5c743f0cf5835d4ba3042d39d7345424bc50bfbe39f8144113

  • SSDEEP

    768:cj90v2+zWL5ZSiS8OOXGdmZ/Kj1K/LXum9H3ieAs8slF91Z1hx:cj90uL5TS8OOXWmB8cDum4s8slLB

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7377c6aab42bc0bcfa548de5394b32ffebd6da6dd4bb565221c14b49bb7835b3.exe
    "C:\Users\Admin\AppData\Local\Temp\7377c6aab42bc0bcfa548de5394b32ffebd6da6dd4bb565221c14b49bb7835b3.exe"
    1⤵
      PID:2844
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2844 -s 252
        2⤵
        • Program crash
        PID:1692
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2844 -s 308
        2⤵
        • Program crash
        PID:3552
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2844 -ip 2844
      1⤵
        PID:1720
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 2844 -ip 2844
        1⤵
          PID:1680

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2844-132-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB