Analysis

  • max time kernel
    91s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-01-2023 09:56

General

  • Target

    b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe

  • Size

    1.0MB

  • MD5

    2a7463a6a8c0d8070bba46d64d7bf510

  • SHA1

    42ca122e7cd13cfc9b92ac21bdaceb2bd907472a

  • SHA256

    b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69

  • SHA512

    e033750b7308cd084946ad842eba236d95b6c485958e82490d1a71ea164a605f6c57f001f8992daf2fe9f2286b8661599d8962b6c681ff76577729d754c034f5

  • SSDEEP

    12288:TdBxXYib/OGpEhmnH5rfC3oVMM8rUG2fSOfF9TH8JqxpwKcIQUdZ9xxVPC:JXXYib/+4JfCoorU17ffTHEqHwzrUzfC

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe
    "C:\Users\Admin\AppData\Local\Temp\b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe"
    1⤵
      PID:4032
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 380
        2⤵
        • Program crash
        PID:4828
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4032 -ip 4032
      1⤵
        PID:3992

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads