Overview

overview

3

Static

static

5ba58d7d45...ec.exe

windows7-x64

3

5ba58d7d45...ec.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    297s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 14:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    5ba58d7d45dae9aded126301f0d182db2abe80aa4614024dd58cecea245e06ec.exe

  • Size

    584KB

  • MD5

    7b6d09eff7223420352a5bdc1ca596c0

  • SHA1

    41b05a89ab5239c56cc3cc9b9b1124840eec631e

  • SHA256

    5ba58d7d45dae9aded126301f0d182db2abe80aa4614024dd58cecea245e06ec

  • SHA512

    3fe620bd0c8d19002d8a957bd707f42f89e53e43fbd04a758d8bc1438c017fc0dfe65e0d5637fbc31dd1dc3a7ef3e6100b19886fad5dc12b21d2608f4479b8a7

  • SSDEEP

    12288:4nRFtj2zJfUbLXEftfLtA8RKO1WHVaTYe7ce:ORFtj2dfU3XEFrR41+YeQe

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ba58d7d45dae9aded126301f0d182db2abe80aa4614024dd58cecea245e06ec.exe
    "C:\Users\Admin\AppData\Local\Temp\5ba58d7d45dae9aded126301f0d182db2abe80aa4614024dd58cecea245e06ec.exe"
    1⤵
      PID:4312
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 540
        2⤵
        • Program crash
        PID:3000
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 544
        2⤵
        • Program crash
        PID:4316
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4312 -ip 4312
      1⤵
        PID:4832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4312 -ip 4312
        1⤵
          PID:3200

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4312-132-0x0000000000400000-0x00000000004AC000-memory.dmp

                Filesize

                688KB

                Download

              • memory/4312-133-0x0000000000400000-0x00000000004AC000-memory.dmp

                Filesize

                688KB

                Download

              • memory/4312-134-0x0000000000400000-0x00000000004AC000-memory.dmp

                Filesize

                688KB

                Download