Overview

overview

3

Static

static

a1d7bef358...8f.exe

windows7-x64

3

a1d7bef358...8f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 08:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a1d7bef3584e988c9130d37e4d229e9e403d31f09d48be41a69555627028b58f.exe

  • Size

    28KB

  • MD5

    1a4fdbac7c040cb8041e737d93d7b276

  • SHA1

    2f862ea615594e087f791af8079998f61896bb90

  • SHA256

    a1d7bef3584e988c9130d37e4d229e9e403d31f09d48be41a69555627028b58f

  • SHA512

    9566ee0250f8f521c44872be0cef0abb44630124a9f9d82fc4d9c58b3fbef582671cdd725c50132d597f9f86aa19b1321ed953e2da8efcc1e1016c12119f3e5f

  • SSDEEP

    768:+4pX7bvK7FchM2Jn3sCPciEYEzx2fv5tq:+4lynFOciuxYBtq

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a1d7bef3584e988c9130d37e4d229e9e403d31f09d48be41a69555627028b58f.exe
    "C:\Users\Admin\AppData\Local\Temp\a1d7bef3584e988c9130d37e4d229e9e403d31f09d48be41a69555627028b58f.exe"
    1⤵
      PID:4788
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 252
        2⤵
        • Program crash
        PID:3256
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 304
        2⤵
        • Program crash
        PID:5072
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4788 -ip 4788
      1⤵
        PID:1040
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4788 -ip 4788
        1⤵
          PID:3540

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4788-132-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB

          Download