Analysis

  • max time kernel
    152s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2022 02:08

General

  • Target

    dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe

  • Size

    32KB

  • MD5

    62453c10ee7a6a83af22fe35d98371f5

  • SHA1

    eef16c96818898b8456a8a7cbe287f69c638a526

  • SHA256

    dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558

  • SHA512

    faa909dda7c340489f3c6a044fd2d623b0d537eb406c5c0861cd6118fe500d2df8133681a1d32d8e2b4368fe6f33fced9e81dc21fd3a514c024d6fc1b309ff17

  • SSDEEP

    768:E/qF/LKI6oh244vibXEhOKEuLqbEO7fsO+cRv39gP8gwQKZEyuKk9jR9O:EqDKIB244KbEhOKEuLy7szc3q8fQYFiO

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe
    "C:\Users\Admin\AppData\Local\Temp\dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe"
    1⤵
      PID:2972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 252
        2⤵
        • Program crash
        PID:2944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 264
        2⤵
        • Program crash
        PID:3760
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2972 -ip 2972
      1⤵
        PID:1228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2972 -ip 2972
        1⤵
          PID:3764

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2972-132-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB