Analysis

  • max time kernel
    91s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 13:47

General

  • Target

    ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe

  • Size

    8KB

  • MD5

    043c3e64e9d9ef8f98d3e635ec42ff5a

  • SHA1

    346f4d3ad029d6e81c0a09d196de25d08c3bed15

  • SHA256

    ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02

  • SHA512

    01f7e36d7072303ba056070cd1027a419ba6a76a3f0f859cf777621eebb2a8e90494fcbdea497d14f9d63fb681a8c8bfbb2fbc985d91d31929bddf4003f386ee

  • SSDEEP

    48:ahuu85bl6oM8ErDLlDV0LYNUyBxj9K1FlKFhYberUxUkX:pVp1MHrDLlDV6mUyTU1FE+

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe
    "C:\Users\Admin\AppData\Local\Temp\ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe"
    1⤵
      PID:4948
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 220
        2⤵
        • Program crash
        PID:5024
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 244
        2⤵
        • Program crash
        PID:3980
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4948 -ip 4948
      1⤵
        PID:3884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4948 -ip 4948
        1⤵
          PID:4888

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads