Overview

overview

3

Static

static

c3d08dfbc1...08.exe

windows7-x64

3

c3d08dfbc1...08.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 08:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c3d08dfbc1616434a8a6f8687264a68666808dcdde41f8d4f2cdc0a15c678708.exe

  • Size

    24KB

  • MD5

    a2113e16fd86a9d7122ed29883e82c6e

  • SHA1

    5a8c273337b9ff3448b5fda96ef9a10d19568744

  • SHA256

    c3d08dfbc1616434a8a6f8687264a68666808dcdde41f8d4f2cdc0a15c678708

  • SHA512

    caa41a7e11d1b13678211cdf8a69300dc89db2eac933cf23cfacc55f3597372e54f550d9ac6d9a4fdecf55eb9835e220d12968032dc9be1182eb495934c5ea46

  • SSDEEP

    6:iz3SsEu9/YM+VS2eApxOj2BORIBvuJKQmQ:wT9/YMFW/aWORIBvuJ5

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c3d08dfbc1616434a8a6f8687264a68666808dcdde41f8d4f2cdc0a15c678708.exe
    "C:\Users\Admin\AppData\Local\Temp\c3d08dfbc1616434a8a6f8687264a68666808dcdde41f8d4f2cdc0a15c678708.exe"
    1⤵
      PID:4384
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4384 -s 264
        2⤵
        • Program crash
        PID:2816
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4384 -s 268
        2⤵
        • Program crash
        PID:2884
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4384 -ip 4384
      1⤵
        PID:2548
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4384 -ip 4384
        1⤵
          PID:3060

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4384-132-0x0000000000400000-0x0000000000415000-memory.dmp

          Filesize

          84KB

          Download