Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 23:38

General

  • Target

    bf3ab2a9ab2c50472fdfc43f8b9cf1a1337755167f92266fadecf845e4f74307.exe

  • Size

    752KB

  • MD5

    90ba1f290bbc3e7545f737c163d06ff8

  • SHA1

    0d6c7e0a4de2117e9b0e38a05315a9c489930981

  • SHA256

    bf3ab2a9ab2c50472fdfc43f8b9cf1a1337755167f92266fadecf845e4f74307

  • SHA512

    339e020c8957ac828a9563b45abb30c5b7c103540c19c46bde19d212769ba9a34f45a3d93f6164d20419dcbf612aacf5b81507a8a0dbcf908f5bd82aa603b0b1

  • SSDEEP

    12288:8UmWY78w3IZl/qJyxR0qVtprVpr8yrfOkVWhWo/+BbADltb4TAsaPLoE6aKKh3Sf:8Umr7EWJy/VVtprVGyrfOCWAow2NMgLY

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf3ab2a9ab2c50472fdfc43f8b9cf1a1337755167f92266fadecf845e4f74307.exe
    "C:\Users\Admin\AppData\Local\Temp\bf3ab2a9ab2c50472fdfc43f8b9cf1a1337755167f92266fadecf845e4f74307.exe"
    1⤵
      PID:3140
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3140 -s 408
        2⤵
        • Program crash
        PID:4880
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3140 -ip 3140
      1⤵
        PID:4020

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3140-132-0x0000000000400000-0x00000000004EF000-memory.dmp

        Filesize

        956KB