Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-12-2022 02:02

General

  • Target

    cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe

  • Size

    925KB

  • MD5

    1be9bcedfcc0deba15d36f3fc86aa45c

  • SHA1

    2ebfc47f72051d5289c3a5d02ba92f289182c9eb

  • SHA256

    cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d

  • SHA512

    33a07b6a74742f1a12a9d06f3f2be980c7fde236114020b4bf7448b42c81feb7b9833799d7dc3239b7ca1ab3f7678ea2e86684e12221c047149c9e7807e39504

  • SSDEEP

    24576:OVDx8DrtRqKg1xTdFyTHVXxuILCJZeislxSyDjEtZSwTK:OVDxK/MdFs1XxuIWj4XwhTK

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe
    "C:\Users\Admin\AppData\Local\Temp\cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe"
    1⤵
      PID:520
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 592
        2⤵
        • Program crash
        PID:4864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 612
        2⤵
        • Program crash
        PID:3248
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 520 -ip 520
      1⤵
        PID:3264
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 520 -ip 520
        1⤵
          PID:4920

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/520-132-0x0000000000400000-0x00000000005C6000-memory.dmp

          Filesize

          1.8MB

        • memory/520-134-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-133-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-135-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-136-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-138-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-139-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-137-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-140-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-141-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/520-142-0x0000000000400000-0x00000000005C6000-memory.dmp

          Filesize

          1.8MB

        • memory/520-143-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB