Analysis

  • max time kernel
    91s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 05:24

General

  • Target

    c6093b47334b5f89b4ac38bda67c4909ab68384c022ffc48dd6a480d19444cfa.exe

  • Size

    134KB

  • MD5

    1f76344d9af85d18c7dabda06646f249

  • SHA1

    340d6f614527ad5b6e884491c4f70f63e28535a6

  • SHA256

    c6093b47334b5f89b4ac38bda67c4909ab68384c022ffc48dd6a480d19444cfa

  • SHA512

    2fadf885170eed8e5b9127012691bc36de8d89a4f9a795aa9c0285451fa3a42dd04bd2810ec8d9db3805725f54e59f4a2280262a7ac228757621eeacf794a0d1

  • SSDEEP

    1536:Zk+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:y+FDzK71QkbstyJjCKICpC72s/mlaX

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6093b47334b5f89b4ac38bda67c4909ab68384c022ffc48dd6a480d19444cfa.exe
    "C:\Users\Admin\AppData\Local\Temp\c6093b47334b5f89b4ac38bda67c4909ab68384c022ffc48dd6a480d19444cfa.exe"
    1⤵
      PID:4884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 380
        2⤵
        • Program crash
        PID:820
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 424
        2⤵
        • Program crash
        PID:1096
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4884 -ip 4884
      1⤵
        PID:3404
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4884 -ip 4884
        1⤵
          PID:4532

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4884-132-0x0000000000400000-0x0000000000454000-memory.dmp

          Filesize

          336KB