Analysis

  • max time kernel
    152s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 14:02

General

  • Target

    6538dfff20836fb1ca68b39d4dade67f6d65959e9112e19755d7fcd7cebf9178.exe

  • Size

    492KB

  • MD5

    613819220873ebeefc3ae9d897df721f

  • SHA1

    4e20761867fffb0cb45965c182424135968283be

  • SHA256

    6538dfff20836fb1ca68b39d4dade67f6d65959e9112e19755d7fcd7cebf9178

  • SHA512

    757ac297517763121253423eb841f90ff286772fc2afe5ec0bb922f6fac832bc276d75e808251f86ec408542d7a83bf21d510f7a4cdca947539fad35ba718a17

  • SSDEEP

    12288:FC9f8j5A5TblWI+mQSzh9Qbu0P5FfpERRNdn:8925AxboIxUnP5nEBdn

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6538dfff20836fb1ca68b39d4dade67f6d65959e9112e19755d7fcd7cebf9178.exe
    "C:\Users\Admin\AppData\Local\Temp\6538dfff20836fb1ca68b39d4dade67f6d65959e9112e19755d7fcd7cebf9178.exe"
    1⤵
      PID:4976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 520
        2⤵
        • Program crash
        PID:4584
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4976 -ip 4976
      1⤵
        PID:4436

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4976-132-0x0000000000640000-0x0000000000649000-memory.dmp

              Filesize

              36KB

            • memory/4976-133-0x0000000000400000-0x00000000004FE000-memory.dmp

              Filesize

              1016KB