Analysis

  • max time kernel
    304s
  • max time network
    382s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2022 20:40

General

  • Target

    864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe

  • Size

    276KB

  • MD5

    9d1bc30e6310f070e2f2a164f7946014

  • SHA1

    05f119e25d5e1b9a76510b6c1c5e1d9569491091

  • SHA256

    864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b

  • SHA512

    e4d9dfea946730ad7d0deb83b3be8e704a0ecbc95a29f264bc823eee460b4fc619de5444e8d66343c73a7ee9d4c4f4886011c0787461dd14ed461ca7c53873c5

  • SSDEEP

    3072:wnUoDiOA+cDnsOvEfvPK60XNn/3b7st+zUuZGfpA6hlU9/cMvlBh:wnUwXOvkvC9du+zhMBVhlA/Bh

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe
    "C:\Users\Admin\AppData\Local\Temp\864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe"
    1⤵
      PID:4720
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 224
        2⤵
        • Program crash
        PID:3172
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4720 -ip 4720
      1⤵
        PID:1916

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4720-132-0x0000000000400000-0x0000000000445200-memory.dmp

        Filesize

        276KB