Overview

overview

3

Static

static

07f56ff657...6a.exe

windows7-x64

3

07f56ff657...6a.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-12-2022 01:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe

  • Size

    540KB

  • MD5

    13222e196153f6824be2d928c639db10

  • SHA1

    d4c3606258d431c3c7250303361c834c0c374d68

  • SHA256

    07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a

  • SHA512

    ecca911d36c82a3d9c45a011af7a245b8e776ea43c57f12019a74eb1cd119294b12af5d79b8c96eadfa5da24eb7a9397918c2fdae8ad9664e62b2212e57b0899

  • SSDEEP

    6144:AHAQzrxXrgegf5/agdapKK+G7qRsGrCOgNVOiYSi2upxuC2f:kHzrxXi5zYpKzCp12G

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe
    "C:\Users\Admin\AppData\Local\Temp\07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe"
    1⤵
      PID:5016
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 476
        2⤵
        • Program crash
        PID:1400
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 484
        2⤵
        • Program crash
        PID:4236
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5016 -ip 5016
      1⤵
        PID:5088
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 5016 -ip 5016
        1⤵
          PID:1672

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5016-132-0x00000000008E0000-0x000000000096B000-memory.dmp

          Filesize

          556KB

          Download