Analysis

  • max time kernel
    90s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2022, 00:23

General

  • Target

    2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe

  • Size

    413KB

  • MD5

    449d51cfbbca375effd9c4a5c90add20

  • SHA1

    fed6d6e14bd5f4dc8153bf32d74dc854388f1fdf

  • SHA256

    2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04

  • SHA512

    6e5bd484062d1fe93555b01057c1f073a1dae3d1703cb90eed07d2a02e24c6ab5a9bd54fa3e610f8b8f62ea32edac48154522be627b4ce9bf80fa4adf8cb6d0e

  • SSDEEP

    6144:r+B/QAY5X9vUgno2kJGj5xZg7PPZ4a/NElH1b0BrYIt9z4ti1g9lQKfCT0xyv7UN:r0Y5BUg59yZ7/NEgB0ItZWi1S/K0076

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe
    "C:\Users\Admin\AppData\Local\Temp\2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe"
    1⤵
      PID:4844
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 348
        2⤵
        • Program crash
        PID:2436
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4844 -ip 4844
      1⤵
        PID:4592

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads