Analysis

  • max time kernel
    66s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-12-2022 18:35

General

  • Target

    8bc19641f9095f8c86c3836cf1f9d7b1dd14a1c62da0320ce09d5e27d0104927.exe

  • Size

    879KB

  • MD5

    45f6980ec4c0108bb1103cbc1906fa18

  • SHA1

    26504d9884c97a2fab9aa128148a5b36becf9e92

  • SHA256

    8bc19641f9095f8c86c3836cf1f9d7b1dd14a1c62da0320ce09d5e27d0104927

  • SHA512

    64fc21f11fc4bfbd485111695ee2ac9e1e70f4107893e259aa4d705a7ad647e7968f3c223d8d647124c8b0d8f041bae074c600a0ae168b0eb166cd62ee877049

  • SSDEEP

    24576:Cubv+5jv8LiSo2Jbqok9WYik0km7tm/78IM6lnI:CahLiSo2JbqXFikY0gIM6lnI

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8bc19641f9095f8c86c3836cf1f9d7b1dd14a1c62da0320ce09d5e27d0104927.exe
    "C:\Users\Admin\AppData\Local\Temp\8bc19641f9095f8c86c3836cf1f9d7b1dd14a1c62da0320ce09d5e27d0104927.exe"
    1⤵
      PID:2812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2812 -s 472
        2⤵
        • Program crash
        PID:1560
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2812 -ip 2812
      1⤵
        PID:1424

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2812-132-0x0000000000400000-0x0000000000529000-memory.dmp

        Filesize

        1.2MB

      • memory/2812-133-0x0000000077C10000-0x0000000077DB3000-memory.dmp

        Filesize

        1.6MB

      • memory/2812-134-0x0000000076B20000-0x0000000076D35000-memory.dmp

        Filesize

        2.1MB

      • memory/2812-136-0x0000000000400000-0x0000000000529000-memory.dmp

        Filesize

        1.2MB