Analysis

  • max time kernel
    151s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-12-2022 10:23

General

  • Target

    a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe

  • Size

    80KB

  • MD5

    c04ef8bc00d27ef1a00c76bc87f31b63

  • SHA1

    5ddae4e0300daafe71c6116653a972d2b390344c

  • SHA256

    a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52

  • SHA512

    513d7c00be30d1503f881a4449abe62e20bb9a26281437ec68d6536ff862c0efb1f1fe992b871ba2de95da6af97ceb1321e44841cea4285f59f3ff2b40e47b6a

  • SSDEEP

    1536:B4OslC5xUp7A9DbPT5ZmfM5QOjAp8SxwfKtap4d+bakPMb7o5JlIp:/8C5qmND9c05QOjAp8SxGK+bx0b7o5Jo

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe
    "C:\Users\Admin\AppData\Local\Temp\a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe"
    1⤵
      PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 456
        2⤵
        • Program crash
        PID:3156
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 472
        2⤵
        • Program crash
        PID:4408
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5060 -ip 5060
      1⤵
        PID:396
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 5060 -ip 5060
        1⤵
          PID:3176

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads