Overview

overview

3

Static

static

ad4660ed31...eb.exe

windows7-x64

3

ad4660ed31...eb.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    159s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 08:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ad4660ed31bc8e36a00585355ad36d3bda2df76920eed50ca22b9c8082654eeb.exe

  • Size

    20KB

  • MD5

    0c9dedb998ef993e154f5821e71a167b

  • SHA1

    b37424f4b8fbb2421591b66538e7fdb6eb9b5631

  • SHA256

    ad4660ed31bc8e36a00585355ad36d3bda2df76920eed50ca22b9c8082654eeb

  • SHA512

    0532c530f0bf96fcf71210afe47dfe1e34f7cea7e0299b19e06ffe64999032f45b3d77fd5d37933f4666e4437809df2ece1c4ec101a1091e7f67cc32ec29e8b1

  • SSDEEP

    48:/RnBGvcu2uy7NzGfn/JO51YZ192YQnMuES27Ui:N0b2ll0n05+Z192YoMu12r

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad4660ed31bc8e36a00585355ad36d3bda2df76920eed50ca22b9c8082654eeb.exe
    "C:\Users\Admin\AppData\Local\Temp\ad4660ed31bc8e36a00585355ad36d3bda2df76920eed50ca22b9c8082654eeb.exe"
    1⤵
      PID:4936
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4936 -s 268
        2⤵
        • Program crash
        PID:804
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4936 -s 272
        2⤵
        • Program crash
        PID:4084
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4936 -ip 4936
      1⤵
        PID:3356
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4936 -ip 4936
        1⤵
          PID:4492

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4936-135-0x0000000000400000-0x0000000000416000-memory.dmp

          Filesize

          88KB

          Download