Analysis

  • max time kernel
    91s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 09:23

General

  • Target

    bcc9e643dfb7bf2f64fa72b1e8cfb4f111bb546c173ae09e700f49db3a9f7ab0.exe

  • Size

    715KB

  • MD5

    df7c419bc03405b90b5fc6b5d79a45cb

  • SHA1

    2411113f613e011b8187f70dd89f0349ea3b937d

  • SHA256

    bcc9e643dfb7bf2f64fa72b1e8cfb4f111bb546c173ae09e700f49db3a9f7ab0

  • SHA512

    5d604d141e4955ec408f176258d663f5ff524d014a558f6b36decbab08c54ab0f2bcc4b8f29b48c0d52ac6c3d3c17519ef6081ae3097f5ae19daec1c0bbba308

  • SSDEEP

    12288:L6H4lgph9uw8TXJelx1bW0/Ae5mwLaENaNkhFyx0xlRJXvHvoVtC6oDF5v:L6KgkwiXIlRYe5LaENa4o0RJXvPozChz

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcc9e643dfb7bf2f64fa72b1e8cfb4f111bb546c173ae09e700f49db3a9f7ab0.exe
    "C:\Users\Admin\AppData\Local\Temp\bcc9e643dfb7bf2f64fa72b1e8cfb4f111bb546c173ae09e700f49db3a9f7ab0.exe"
    1⤵
      PID:4988
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 368
        2⤵
        • Program crash
        PID:4800
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4988 -ip 4988
      1⤵
        PID:4248

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4988-132-0x0000000000A90000-0x0000000000B46000-memory.dmp

        Filesize

        728KB