Analysis

  • max time kernel
    191s
  • max time network
    206s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 07:59

General

  • Target

    d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe

  • Size

    28KB

  • MD5

    7a374ee7d5e6f0e37d58bd4bc6afa5d3

  • SHA1

    2956a685af27ffb5f861ef0b6b13c2d0b2730dee

  • SHA256

    d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03

  • SHA512

    0a6150993130961554bba81937748a405996fbc1133f7de25ce6395de76a46b70d711dd423f43100765a9e5ce3143d6ca5de6a152c54fb73b60de33435bcb055

  • SSDEEP

    192:aZiZkraWm4BQV5NNl4gKOt+poHVlXA7GPwFV5OzWq0u0Go21Y0r1hXu9Xq8NK0ox:aZAIeVLJKEuCwX5OzZ0u0VB03XupqkG

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe
    "C:\Users\Admin\AppData\Local\Temp\d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe"
    1⤵
      PID:2600
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2600 -s 256
        2⤵
        • Program crash
        PID:4820
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2600 -s 252
        2⤵
        • Program crash
        PID:3852
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2600 -ip 2600
      1⤵
        PID:664
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2600 -ip 2600
        1⤵
          PID:3448

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2600-132-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB

        • memory/2600-133-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB