Analysis

  • max time kernel
    90s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 16:42

General

  • Target

    e0f26f6bf73547de7c6a0dc91c88f9726a18ebe5d707be242e6f2a025b9e83b4.exe

  • Size

    72KB

  • MD5

    169f25f9a092d26ac7ebcd6d13ea6eae

  • SHA1

    7ac2eaf961268ba30d3da0e23c0a60e775b1bcad

  • SHA256

    e0f26f6bf73547de7c6a0dc91c88f9726a18ebe5d707be242e6f2a025b9e83b4

  • SHA512

    d6ee3351a732abae1aee00a4f71cd72eb867e8a966207cbde7f8d79cf698d6da60f7813ac85e343188ffbac6ed27ba54acf882ced2024a0853622e1fccbfc4ed

  • SSDEEP

    1536:h4n52IGUPMWLpbQ/UTO7pcXqXRQ7NkPE:PrUrcc/XgG7ec

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0f26f6bf73547de7c6a0dc91c88f9726a18ebe5d707be242e6f2a025b9e83b4.exe
    "C:\Users\Admin\AppData\Local\Temp\e0f26f6bf73547de7c6a0dc91c88f9726a18ebe5d707be242e6f2a025b9e83b4.exe"
    1⤵
      PID:2200
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 392
        2⤵
        • Program crash
        PID:1236
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2200 -ip 2200
      1⤵
        PID:3536

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2200-132-0x0000000000400000-0x000000000041D000-memory.dmp

              Filesize

              116KB

            • memory/2200-133-0x0000000000400000-0x000000000041D000-memory.dmp

              Filesize

              116KB