Analysis

  • max time kernel
    185s
  • max time network
    192s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 18:54

General

  • Target

    b842540bc04a276e0a16b66e7bd929e0b8cc1d7ba14e19771ec050e4331cb01c.exe

  • Size

    1.8MB

  • MD5

    c782ead1089596103a92ebbf67036b44

  • SHA1

    b0d7630235fde31236c14fd9fa59ed0214a6e7e3

  • SHA256

    b842540bc04a276e0a16b66e7bd929e0b8cc1d7ba14e19771ec050e4331cb01c

  • SHA512

    493076c1e53c6b217df17a67bfd5d862feb1fbdb29add7fe5ea27048c4fe83584c0583c9db23b0d08498b54118a1b7961a7de9f0b4fd4d51ffcfb08d2982024c

  • SSDEEP

    24576:WmaqsOwITSkNreFXbjpmy6Vf1PQf9sXvlcUJzxWcAKU6DCqH2DtZ6xJo3dKmd/oB:9xiFXbjpmy6p18sXdbtxFCqH6rfPA/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b842540bc04a276e0a16b66e7bd929e0b8cc1d7ba14e19771ec050e4331cb01c.exe
    "C:\Users\Admin\AppData\Local\Temp\b842540bc04a276e0a16b66e7bd929e0b8cc1d7ba14e19771ec050e4331cb01c.exe"
    1⤵
      PID:3956
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3956 -s 268
        2⤵
        • Program crash
        PID:664
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3956 -ip 3956
      1⤵
        PID:2832

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3956-132-0x0000000000660000-0x00000000006D2000-memory.dmp

        Filesize

        456KB