Analysis

  • max time kernel
    173s
  • max time network
    209s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 08:05

General

  • Target

    a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe

  • Size

    20KB

  • MD5

    3371f61a06e019f24e564aaa552b4440

  • SHA1

    c49e015d979b46e49acfd0e2977e1d2b97b45d48

  • SHA256

    a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924

  • SHA512

    8090b79b68a89fe4b5c65b2cedfae66805b9d61bb886e39f080c0bd255e5a15927eefad99cc35b96461d844f84f95b9e777a3d009c02f8a59e235281d257fbcf

  • SSDEEP

    384:+2oZ2dEVErPPKDvtCn11242cI0kts+5ON:EZ2dEVEbKxCn11HdpK5

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe
    "C:\Users\Admin\AppData\Local\Temp\a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe"
    1⤵
      PID:2104
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 252
        2⤵
        • Program crash
        PID:8
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 264
        2⤵
        • Program crash
        PID:3508
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2104 -ip 2104
      1⤵
        PID:2068
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 2104 -ip 2104
        1⤵
          PID:3568

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2104-132-0x0000000000400000-0x0000000000416000-memory.dmp

          Filesize

          88KB

        • memory/2104-133-0x0000000000400000-0x0000000000416000-memory.dmp

          Filesize

          88KB