Analysis

  • max time kernel
    98s
  • max time network
    172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 10:09

General

  • Target

    972c804c65a5439eee1e5cb544289b25614bfe613ef2f4e8661ebaadcb4d47fc.exe

  • Size

    349KB

  • MD5

    2cd356d3ba41b5e2656f706916614ca2

  • SHA1

    0a63149a88dbf076f67b50dc5c26a7417763cb48

  • SHA256

    972c804c65a5439eee1e5cb544289b25614bfe613ef2f4e8661ebaadcb4d47fc

  • SHA512

    694a0e57e1f1736d600222f827d1e06c23939c5da283f7f80f38176f921fe7a49e2429f957f80819de40cb70d906191855b7c58636298677c6c2a639a7b85c84

  • SSDEEP

    6144:TXcio3U/8QeIk4xeD+Ex5Hbt7uRZptmJwDQiULjJoxGq6IEZDsIK:TXcik69RkiAuZbmJcQiEFYGq6jsH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\972c804c65a5439eee1e5cb544289b25614bfe613ef2f4e8661ebaadcb4d47fc.exe
    "C:\Users\Admin\AppData\Local\Temp\972c804c65a5439eee1e5cb544289b25614bfe613ef2f4e8661ebaadcb4d47fc.exe"
    1⤵
      PID:520
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 272
        2⤵
        • Program crash
        PID:4008
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 520 -ip 520
      1⤵
        PID:1320

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/520-132-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-133-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-135-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-137-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-139-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-141-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-143-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-145-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-147-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-149-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-153-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-155-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-151-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-157-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-159-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-161-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-163-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-165-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-167-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-169-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-171-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-173-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-177-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-179-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-181-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-175-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-183-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-185-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-187-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-189-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-191-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-193-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-195-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB

            • memory/520-328-0x00000000005AB000-0x00000000005AD000-memory.dmp

              Filesize

              8KB

            • memory/520-329-0x0000000000560000-0x00000000005CC000-memory.dmp

              Filesize

              432KB