Overview

overview

3

Static

static

e67f75cf13...63.exe

windows7-x64

1

e67f75cf13...63.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    155s
  • max time network
    190s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-12-2022 11:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e67f75cf13d2971b8981e59fe5e0b7b8861303e4f0ecaf1e3acedad6107f4063.exe

  • Size

    796KB

  • MD5

    e0d1e70f25918ea8b1593fb66c2aa0c4

  • SHA1

    a97c0356d0d4eb5cf1819f6eb38586cf9b897f78

  • SHA256

    e67f75cf13d2971b8981e59fe5e0b7b8861303e4f0ecaf1e3acedad6107f4063

  • SHA512

    9fb18ec7439f0e2ffe01547329c43c776baf5599150006e9d46e6336b9d57d2d000a3fb118373ed395a3434cb8ce22a34c629c1aa7f6960aa19c7c4d13c49086

  • SSDEEP

    12288:Y54lePBj/Bd90kLykJvDm/4Lqnfyojs2eyb9caqbSQG3TlJlD3+MoK7jPqwi:K4AB/Dp7DmLnfyUR9caqbVUbrL7W

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e67f75cf13d2971b8981e59fe5e0b7b8861303e4f0ecaf1e3acedad6107f4063.exe
    "C:\Users\Admin\AppData\Local\Temp\e67f75cf13d2971b8981e59fe5e0b7b8861303e4f0ecaf1e3acedad6107f4063.exe"
    1⤵
      PID:8
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 8 -s 528
        2⤵
        • Program crash
        PID:4116
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 8 -s 572
        2⤵
        • Program crash
        PID:4724
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 8 -ip 8
      1⤵
        PID:876
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 8 -ip 8
        1⤵
          PID:4788

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/8-132-0x00000000005CB000-0x00000000005F5000-memory.dmp

          Filesize

          168KB

          Download

        • memory/8-133-0x000000000272E000-0x00000000027C5000-memory.dmp

          Filesize

          604KB

          Download