Analysis

  • max time kernel
    70s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 21:57

General

  • Target

    f1e367b71bfe12fe8c0b5153af9d19e6c2e60aadf7f54188b470c1dc8388b843.exe

  • Size

    119KB

  • MD5

    08a05fad03ac164df0a6e5a81931d002

  • SHA1

    b729085f687d9e5305a8e2ded485e9437eef1151

  • SHA256

    f1e367b71bfe12fe8c0b5153af9d19e6c2e60aadf7f54188b470c1dc8388b843

  • SHA512

    01a29b4afbd7e1d8520924d26a7bb7a061d088ea2cde16e75650d55f88f728acf939353f8679499b016d34a0337cc7bbf95446ededed1e69e41c43292274207b

  • SSDEEP

    3072:seuZrCDP9awSCYgBBf2ZA3val2ZaBO6+POGYoCc:OrCDP8wVYWQyCl2KN4f

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f1e367b71bfe12fe8c0b5153af9d19e6c2e60aadf7f54188b470c1dc8388b843.exe
    "C:\Users\Admin\AppData\Local\Temp\f1e367b71bfe12fe8c0b5153af9d19e6c2e60aadf7f54188b470c1dc8388b843.exe"
    1⤵
      PID:3036
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 264
        2⤵
        • Program crash
        PID:3816
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3036 -ip 3036
      1⤵
        PID:1756

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3036-132-0x0000000000400000-0x000000000047E000-memory.dmp

              Filesize

              504KB

            • memory/3036-133-0x0000000000400000-0x000000000047E000-memory.dmp

              Filesize

              504KB