Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 06:33

General

  • Target

    e0bfac9109d76be0c21960fe7d3712830a45442df539a42e68125c22a128dd47.exe

  • Size

    650KB

  • MD5

    10c0ae4a551ab763aed00c0a4dcb51fd

  • SHA1

    ccd38f0752a0df3122c8fd3fc4ce52b449854cf9

  • SHA256

    e0bfac9109d76be0c21960fe7d3712830a45442df539a42e68125c22a128dd47

  • SHA512

    b22de7b6d6e3294f811bbfd61b63a333ae5d23d7ed33f5484551000c5867dbf9b2a68589eb930ae0daba080010773f2044e6427ec53d466de5efa3f9ea91505b

  • SSDEEP

    12288:IKva5xxt6T4Tsh4FrSwhfMH4D89IIRIp/vwx71beplkDTLgORqeJBV1Ls2LMpB8J:ByX6kTYWuyfMYD89IIF71ePOMeJBV1Ld

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0bfac9109d76be0c21960fe7d3712830a45442df539a42e68125c22a128dd47.exe
    "C:\Users\Admin\AppData\Local\Temp\e0bfac9109d76be0c21960fe7d3712830a45442df539a42e68125c22a128dd47.exe"
    1⤵
      PID:3488
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3488 -s 2344
        2⤵
        • Program crash
        PID:1900
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3488 -ip 3488
      1⤵
        PID:4140

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3488-132-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-133-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-136-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-135-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-137-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-134-0x00000000023D0000-0x00000000023E0000-memory.dmp

        Filesize

        64KB

      • memory/3488-138-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-139-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-141-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-140-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-142-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-143-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-144-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-145-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-146-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-147-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-148-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-149-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-150-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-151-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-152-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-153-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-154-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-155-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-156-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-157-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-158-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-159-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-160-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-161-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-162-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-163-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-164-0x00000000023C0000-0x00000000023D0000-memory.dmp

        Filesize

        64KB

      • memory/3488-165-0x00000000060D0000-0x00000000060E0000-memory.dmp

        Filesize

        64KB

      • memory/3488-166-0x00000000060D0000-0x00000000060E0000-memory.dmp

        Filesize

        64KB

      • memory/3488-167-0x00000000060D0000-0x00000000060E0000-memory.dmp

        Filesize

        64KB