Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2023, 01:56

General

  • Target

    7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0.exe

  • Size

    444KB

  • MD5

    5d5668bb4ab52adafe0d23a21c1a7e0d

  • SHA1

    7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0

  • SHA256

    deed2e1b5196f7adb36c18e789446ee9680c42c8801556e3d48600dd13261228

  • SHA512

    e1d79adb93398dfeceec44cd6f08fb78f2ed96ce5e5580a4362420b0e6ea074342bc07fcf8fb593fc5401a75109c792c3c4519fe96fbd0ee0966b6e66f43e913

  • SSDEEP

    6144:vftyYc1YYY3VB9dI3Y0aD3ZgEgwTb/FCyKYs7A2e2s5odiMQuQqiWPMjTdRWTbRk:3hdLT1X7gyKR7Q2PyXW0j5cvn/

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0.exe
    "C:\Users\Admin\AppData\Local\Temp\7b90d711b05e7dc0f95be26685ed7d6b1e5aaee0.exe"
    1⤵
      PID:4328
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 504
        2⤵
        • Program crash
        PID:2040
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 512
        2⤵
        • Program crash
        PID:2804
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4328 -ip 4328
      1⤵
        PID:4608
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 4328 -ip 4328
        1⤵
          PID:1492

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4328-132-0x0000000000410000-0x00000000004E1000-memory.dmp

                Filesize

                836KB