Analysis
-
max time kernel
159s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06/12/2022, 23:13
General
-
Target
b6ba3ef86c25adc000c1598a34b553aec2d038b54630a3f9adf97a5f145d08bc.exe
-
Size
823KB
-
MD5
7922489ab75fde1ecd42cd953730868a
-
SHA1
e148a8e7bfe9e630b02a73dba1bf221ada81f732
-
SHA256
b6ba3ef86c25adc000c1598a34b553aec2d038b54630a3f9adf97a5f145d08bc
-
SHA512
1f9c43bb8a63acee62bf9c78828475f6e093360da76e9b824c0042e00c12442184c3508db1596ebf20886a25b3ea88c9495795db35f4dcf148aa9d3c9c3553f3
-
SSDEEP
24576:zrcuVldEYfv4gbQf4HsVAOtMnjyPevlSSvVn:zrcClnaq49PJQ
Score
8/10
Malware Config
Signatures
-
ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6ba3ef86c25adc000c1598a34b553aec2d038b54630a3f9adf97a5f145d08bc.exe"C:\Users\Admin\AppData\Local\Temp\b6ba3ef86c25adc000c1598a34b553aec2d038b54630a3f9adf97a5f145d08bc.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1812 -s 3882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1812 -s 7482⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1812 -ip 18121⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1812 -ip 18121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
-
Filesize
256KB
-
Filesize
48KB
-
Filesize
1.0MB
-
Filesize
256KB