Analysis

  • max time kernel
    187s
  • max time network
    207s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 02:59

General

  • Target

    a944bd6aaa536184c38c86fde8ea6ce92e5e1d46072e284d0318982611942985.exe

  • Size

    144KB

  • MD5

    ee7c7bad39f7e972afad2bfa63dcce94

  • SHA1

    8aa06188bdf649ba0af98ab6a1c4da180381c02c

  • SHA256

    a944bd6aaa536184c38c86fde8ea6ce92e5e1d46072e284d0318982611942985

  • SHA512

    8b3a386b22d7968e7954a07aa3d8aa970acbe7d32ef9d980cc0b67a346a2995e7007cb2f71dcfd57647c6fc41b3452d4082c9fc4d00ea88cc0017e36d97e644e

  • SSDEEP

    3072:PUyOeBGn+VSHcuFFnXE2oYG1su9bL25vn3uKBWvNYvKD7R:M7e7aO+Gxi3uKyN1

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a944bd6aaa536184c38c86fde8ea6ce92e5e1d46072e284d0318982611942985.exe
    "C:\Users\Admin\AppData\Local\Temp\a944bd6aaa536184c38c86fde8ea6ce92e5e1d46072e284d0318982611942985.exe"
    1⤵
      PID:3104
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3104 -s 472
        2⤵
        • Program crash
        PID:2796
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3104 -ip 3104
      1⤵
        PID:1052

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3104-132-0x0000000000400000-0x0000000000451000-memory.dmp

        Filesize

        324KB

      • memory/3104-133-0x0000000000400000-0x0000000000451000-memory.dmp

        Filesize

        324KB