Analysis

  • max time kernel
    155s
  • max time network
    187s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 20:52

General

  • Target

    9609378905f1057d5ae72a2595cdd146dc7384a1c6d846228c4912068fe2f0a4.exe

  • Size

    170KB

  • MD5

    4cc3c8b67bdab3f998011249a980c4e2

  • SHA1

    d286150df9024daf862955746f323c8eb1aadf46

  • SHA256

    9609378905f1057d5ae72a2595cdd146dc7384a1c6d846228c4912068fe2f0a4

  • SHA512

    c97bdc3cedb63196f7e6d8369fba598d41775158cb325019d56c0d8a0d44142ce65054202203f615483712c7cd4c9dfb6222e10440d880ccd10202127f2116f5

  • SSDEEP

    3072:Tue0OWBA0t4XO1gAWWF05vFp2PTsfh49pNFlJ/JXqdR9n5nJIs:TOie1WWCbYAfeXD09n5D

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9609378905f1057d5ae72a2595cdd146dc7384a1c6d846228c4912068fe2f0a4.exe
    "C:\Users\Admin\AppData\Local\Temp\9609378905f1057d5ae72a2595cdd146dc7384a1c6d846228c4912068fe2f0a4.exe"
    1⤵
      PID:2976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 356
        2⤵
        • Program crash
        PID:4920
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2976 -ip 2976
      1⤵
        PID:4320

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2976-132-0x0000000000400000-0x0000000000425000-memory.dmp

        Filesize

        148KB

      • memory/2976-133-0x0000000000400000-0x0000000000425000-memory.dmp

        Filesize

        148KB