Overview

overview

3

Static

static

af487a12ac...33.exe

windows7-x64

1

af487a12ac...33.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    166s
  • max time network
    181s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 15:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe

  • Size

    258KB

  • MD5

    187f3d339331510105333ea095ee1afe

  • SHA1

    1666bdffb656e685c011b8348628f1bdf7daa0d9

  • SHA256

    af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33

  • SHA512

    468c7f7c00f602bbcb0ddf0ce113f264b04aaeb79d32268e0651a7d02aeb835b1794166166252c9fad0a30a46d1d377a6883c1d1af724d7c70d546d2941816c5

  • SSDEEP

    6144:/1gaAOU0Y0VKP41fslJ3H/8Fo0BWbZa24vd2wUFyVtJF6v:/1vKr4o0ola2W2wUspFC

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe
    "C:\Users\Admin\AppData\Local\Temp\af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe"
    1⤵
      PID:2200
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 640
        2⤵
        • Program crash
        PID:1504
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 660
        2⤵
        • Program crash
        PID:4348
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2200 -ip 2200
      1⤵
        PID:3376
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2200 -ip 2200
        1⤵
          PID:2308

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2200-132-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB

          Download