Analysis

  • max time kernel
    185s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-12-2022 13:11

General

  • Target

    b0696f041befd1a20b804fde82b84ba087b99302581ea76d3b896950895c43cb.exe

  • Size

    929KB

  • MD5

    4ef7a57bf91b6249b1c96c27b2c0e542

  • SHA1

    35a5cfd0dbe3689d4f4b7f4cddc12e383ab7d82c

  • SHA256

    b0696f041befd1a20b804fde82b84ba087b99302581ea76d3b896950895c43cb

  • SHA512

    95e94b4599287b7e7bd8d1d5778bdc5dee63b4f5eb761904f14f9c51e4eebcdefaa8a6962dddf98f311b67c9032f752ba2969e731f862c5bde9da9d5d3d17686

  • SSDEEP

    24576:wEDBo2vob1XW66cxBl7SPxA2E3m1tXrZwr04zcl2XqEd:w4BoC81Rv2P3E3cEU2Ld

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0696f041befd1a20b804fde82b84ba087b99302581ea76d3b896950895c43cb.exe
    "C:\Users\Admin\AppData\Local\Temp\b0696f041befd1a20b804fde82b84ba087b99302581ea76d3b896950895c43cb.exe"
    1⤵
      PID:4972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 544
        2⤵
        • Program crash
        PID:3144
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 584
        2⤵
        • Program crash
        PID:3052
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4972 -ip 4972
      1⤵
        PID:4156
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4972 -ip 4972
        1⤵
          PID:4012

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4972-132-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-133-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-135-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-134-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-137-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-139-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-138-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-136-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-140-0x0000000000400000-0x0000000000C84000-memory.dmp

          Filesize

          8.5MB

        • memory/4972-141-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4972-142-0x0000000000400000-0x0000000000C84000-memory.dmp

          Filesize

          8.5MB

        • memory/4972-143-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB