Analysis

  • max time kernel
    337s
  • max time network
    353s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 17:35

General

  • Target

    cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe

  • Size

    331KB

  • MD5

    e37b899055596e97b5ce15c6815e3d2e

  • SHA1

    8a58df88edd277731687860f77897cddad4b341a

  • SHA256

    cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3

  • SHA512

    a5a36fcf65f5e12ac474c5474046b52399dde84b4a6d0d0a6ac7937f334180b244668efce8da580a2132f0d01e60f7a39161cbe37f2d7f4a387d717e605d0a7e

  • SSDEEP

    3072:9pDS7Xba3zCFQovNCAHlbg4dQFiF6TE9gXvHTZqJypGuto:KDbaDJovNCAHlzQFi6Sqh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe
    "C:\Users\Admin\AppData\Local\Temp\cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe"
    1⤵
      PID:5080
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 336
        2⤵
        • Program crash
        PID:2648
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5080 -ip 5080
      1⤵
        PID:4756

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5080-132-0x0000000000400000-0x0000000000467000-memory.dmp

        Filesize

        412KB

      • memory/5080-133-0x0000000000400000-0x0000000000467000-memory.dmp

        Filesize

        412KB