Overview

overview

3

Static

static

c0fa86d64f...95.exe

windows7-x64

3

c0fa86d64f...95.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    23s
  • max time network
    3s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-12-2022 06:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c0fa86d64f237f86eb68aef90eb4c2b5408b2971d998eef7a548605722277595.exe

  • Size

    345KB

  • MD5

    ee76420ce7ae7e555432545cea49128f

  • SHA1

    610b94778f10b4e48d3afdd98349917bbc39fb68

  • SHA256

    c0fa86d64f237f86eb68aef90eb4c2b5408b2971d998eef7a548605722277595

  • SHA512

    09e097bf369d0cc2a09d391389617b53fcc20de6f42675ee602efb0b12bc3d2db0d78759ef1b858e7fda250c13def7b7f4b4243d554fac4aeac0d11bdd49bef0

  • SSDEEP

    6144:GMQyQAgO0qLI79DllF2NaaNNECVewrBvVUCpfs6rAZWalV16iWTLL:Z5+xlFp0JrBNDpfqliHLL

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c0fa86d64f237f86eb68aef90eb4c2b5408b2971d998eef7a548605722277595.exe
    "C:\Users\Admin\AppData\Local\Temp\c0fa86d64f237f86eb68aef90eb4c2b5408b2971d998eef7a548605722277595.exe"
    1⤵
      PID:2228
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 516
        2⤵
        • Program crash
        PID:3012
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 544
        2⤵
        • Program crash
        PID:3272
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 2228 -ip 2228
      1⤵
        PID:4832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2228 -ip 2228
        1⤵
          PID:1936

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2228-132-0x0000000000400000-0x000000000051D000-memory.dmp

          Filesize

          1.1MB

          Download