Analysis

  • max time kernel
    91s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 17:07

General

  • Target

    98ad7bf58bfddd343354df5e1a92a1914bb12338985c20837aebb6420c0c82a5.exe

  • Size

    32KB

  • MD5

    e5ab21d52b86b332c8d35d980bb9db9c

  • SHA1

    df37b07968f92c8e5d9e39aa55db787ea55a11cf

  • SHA256

    98ad7bf58bfddd343354df5e1a92a1914bb12338985c20837aebb6420c0c82a5

  • SHA512

    fd81c813effff1dc632bd34f9a8d5e726f8d5b1f0f8d40309934ce1341a546323a19455ae65620a6f5e3d2f57438288d02b3d231851fbcce6f9b287bf39a85d5

  • SSDEEP

    768:BImiaiJyulOqBYZnybWxPn9NUuK8PHcoToGRPx7wZX:oaiEuoqBY0CxfPUxgtTnPx7iX

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\98ad7bf58bfddd343354df5e1a92a1914bb12338985c20837aebb6420c0c82a5.exe
    "C:\Users\Admin\AppData\Local\Temp\98ad7bf58bfddd343354df5e1a92a1914bb12338985c20837aebb6420c0c82a5.exe"
    1⤵
      PID:2636
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2636 -s 252
        2⤵
        • Program crash
        PID:5096
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2636 -s 284
        2⤵
        • Program crash
        PID:5044
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2636 -ip 2636
      1⤵
        PID:4556
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2636 -ip 2636
        1⤵
          PID:5112

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2636-132-0x0000000000400000-0x0000000000413000-memory.dmp

                Filesize

                76KB

              • memory/2636-133-0x0000000000400000-0x0000000000413000-memory.dmp

                Filesize

                76KB