Analysis

  • max time kernel
    151s
  • max time network
    193s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2022, 02:07

General

  • Target

    f395077479eeb61a12a6cf81d945aee6c13cbb5af3f9386a21b699569785901c.exe

  • Size

    24KB

  • MD5

    3424ddfa0dce075b045215304df26c10

  • SHA1

    a51a979965d70f7fc3fbef751d6834d5f56e68d8

  • SHA256

    f395077479eeb61a12a6cf81d945aee6c13cbb5af3f9386a21b699569785901c

  • SHA512

    9da018ebfbde465b30c7b0bebee7afa5c2a712b0825d69dc2c934303a951196c9c6bdfc569ffe2916c8d1d54ccbcfe8ca61fb4e7ba26c9aea0c0a1e07770da2c

  • SSDEEP

    192:49+Vkm5PfPMycznQKheDSaGkCZ0R4UqmHs2h0w2ib4PQ+3Ki9WetxKeSzM928:40VZMjzzIDw4qmMm44+aiseee2

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f395077479eeb61a12a6cf81d945aee6c13cbb5af3f9386a21b699569785901c.exe
    "C:\Users\Admin\AppData\Local\Temp\f395077479eeb61a12a6cf81d945aee6c13cbb5af3f9386a21b699569785901c.exe"
    1⤵
      PID:4276
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4276 -s 252
        2⤵
        • Program crash
        PID:2492
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4276 -s 264
        2⤵
        • Program crash
        PID:312
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 4276 -ip 4276
      1⤵
        PID:1700
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4276 -ip 4276
        1⤵
          PID:344

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4276-132-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB

              • memory/4276-133-0x0000000000400000-0x0000000000415000-memory.dmp

                Filesize

                84KB