Analysis

  • max time kernel
    141s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 08:32

General

  • Target

    bcf1f01f0bc6c9aa99c87130b3e1683955044da10589f17ea5174a3d964ba421.exe

  • Size

    208KB

  • MD5

    3e3e9acdcb45a5d638b8efe2ca1b68c4

  • SHA1

    b12c87359893e40268f7ae6ff64170e3436110a8

  • SHA256

    bcf1f01f0bc6c9aa99c87130b3e1683955044da10589f17ea5174a3d964ba421

  • SHA512

    4da2b5d204a921a95ecb8461808f6b7e3c40c7d71e29fda9bfd5e50e0cb0e104a87a438247eadc31da0328721ab31eecae778c9bfb97a12be43736f4712d5933

  • SSDEEP

    1536:O8f6JtAL1tx4OqV4mY3r9QegJiTkAmEPUhb5Yti7cJbXKFeLxEwexvTGg7jcDBYV:O8DUOC47rtQiTk2yb5Via4qwe//cdYGw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcf1f01f0bc6c9aa99c87130b3e1683955044da10589f17ea5174a3d964ba421.exe
    "C:\Users\Admin\AppData\Local\Temp\bcf1f01f0bc6c9aa99c87130b3e1683955044da10589f17ea5174a3d964ba421.exe"
    1⤵
      PID:4412
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4412 -s 240
        2⤵
        • Program crash
        PID:3468
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4412 -ip 4412
      1⤵
        PID:5008

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4412-132-0x0000000000400000-0x0000000000418000-memory.dmp

              Filesize

              96KB