Analysis

  • max time kernel
    81s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-12-2022 18:46

General

  • Target

    917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe

  • Size

    731KB

  • MD5

    452b47283f81693d2831fe174e3c7071

  • SHA1

    0db4e087924f319012866bb793d7092418d1f593

  • SHA256

    917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66

  • SHA512

    558eb9206e1097ea2fee8508e88632aa9082280a43b7b9c637b309c85a03c02eb159d9c4f53f0dbab2eb0fca5238b3af4359320b1c20e8fb7902e9c82e7eb150

  • SSDEEP

    12288:cRycOktU4g/n/t0EW5A0z/5vJwQ5oalK+G8y93vm7Ik61QQ52LwRg08y5wC1T83U:AxJU4gf2EW5A29Jr1k6y93vqIk6d3NKU

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe
    "C:\Users\Admin\AppData\Local\Temp\917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe"
    1⤵
      PID:2732
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 520
        2⤵
        • Program crash
        PID:2488
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2732 -ip 2732
      1⤵
        PID:2384

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2732-132-0x0000000000400000-0x00000000004C6000-memory.dmp

        Filesize

        792KB