Overview

overview

3

Static

static

a5a33fa3e1...7a.exe

windows7-x64

1

a5a33fa3e1...7a.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    19s
  • max time network
    17s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 09:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe

  • Size

    13KB

  • MD5

    38256bdf6371c6a7b44272dae1ef001b

  • SHA1

    685d87f1417555aa3740d9e91119e0ac82973346

  • SHA256

    a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a

  • SHA512

    1205deb8ea482f5b903f22a7d3693302170366cd9cc1632d696d863e563d9e318642b252d74a3b5739cf0547630c947c810eaabbd4ecf6b230d22013bf73c875

  • SSDEEP

    192:oihOXOsgtaOwXgIH106M+FIzYP+VKLcC8IYLJCssSJ+RAIo:6gIOwyF+FIS+VKLcIYNCcLIo

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe
    "C:\Users\Admin\AppData\Local\Temp\a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe"
    1⤵
      PID:2064
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 220
        2⤵
        • Program crash
        PID:3508
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 228
        2⤵
        • Program crash
        PID:3824
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2064 -ip 2064
      1⤵
        PID:692
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2064 -ip 2064
        1⤵
          PID:4156

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2064-132-0x0000000000400000-0x0000000000407000-memory.dmp

          Filesize

          28KB

          Download

        • memory/2064-133-0x0000000000400000-0x0000000000407000-memory.dmp

          Filesize

          28KB

          Download