Overview

overview

3

Static

static

e0e6c8c952...49.exe

windows7-x64

3

e0e6c8c952...49.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 07:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    e0e6c8c95298fdad28ec8965fbeb4077318aba30596c7f679eca8af27d70d249.exe

  • Size

    104KB

  • MD5

    dca73179f3bb7f1c296c9beba7cea689

  • SHA1

    55e88b4754e1cc6e262f2e3d9c55cadaaab14347

  • SHA256

    e0e6c8c95298fdad28ec8965fbeb4077318aba30596c7f679eca8af27d70d249

  • SHA512

    d2e3b63a3812d5b9f1843958eaa9addac462d488d7289f30369eb99dd2647668611786499b4efefe8740b7f872e92f6c1da2611b0a2975952adcc22571d2c08e

  • SSDEEP

    1536:31fMcNgTCV8e9X+bRokLmLZYzTcXQkb3kIyt38ZpbW:lVV+b94e4X73kIyt3ubW

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0e6c8c95298fdad28ec8965fbeb4077318aba30596c7f679eca8af27d70d249.exe
    "C:\Users\Admin\AppData\Local\Temp\e0e6c8c95298fdad28ec8965fbeb4077318aba30596c7f679eca8af27d70d249.exe"
    1⤵
      PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 284
        2⤵
        • Program crash
        PID:3124
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5060 -ip 5060
      1⤵
        PID:2536

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/5060-132-0x0000000000400000-0x000000000041B000-memory.dmp

              Filesize

              108KB

              Download