Analysis

  • max time kernel
    49s
  • max time network
    75s
  • platform
    windows10-1703_x64
  • resource
    win10-20220901-en
  • resource tags

    arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
  • submitted
    10/02/2023, 21:29

General

  • Target

    d440ee91be30e55a6647019a1e7619b27bbb3fafa990319ecd65c9fca324f550.exe

  • Size

    4.2MB

  • MD5

    646b47564d1c7577f9df1dfabebaac2a

  • SHA1

    1de912702f70b4a1dce0d447c3e374a44b04f695

  • SHA256

    d440ee91be30e55a6647019a1e7619b27bbb3fafa990319ecd65c9fca324f550

  • SHA512

    febb189dedab147bff51a5747ca1c53bf04abbaa4eb49433ece240ae9417825d43ed0f1ef17fe15bcc1dc0566f2712f762e827ef1efe9774ea62bbbc7a6dd408

  • SSDEEP

    98304:1h0GAnB2uOwGZEYCfbpnZKs6VJoZyjy9AmVmtcHl3Tq08+Gfl:16GPEGx6tZKs6VeZS8AmmSFDHmt

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d440ee91be30e55a6647019a1e7619b27bbb3fafa990319ecd65c9fca324f550.exe
    "C:\Users\Admin\AppData\Local\Temp\d440ee91be30e55a6647019a1e7619b27bbb3fafa990319ecd65c9fca324f550.exe"
    1⤵
      PID:1768
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 320
        2⤵
        • Program crash
        PID:4872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1768-120-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-121-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-122-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-123-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-124-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-125-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-126-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-127-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-129-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-128-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-130-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-131-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-132-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-133-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-134-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-135-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-136-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-137-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-138-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-139-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-140-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-141-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-142-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-144-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-145-0x0000000076F50000-0x00000000770DE000-memory.dmp

      Filesize

      1.6MB

    • memory/1768-146-0x0000000002B60000-0x0000000002F4B000-memory.dmp

      Filesize

      3.9MB

    • memory/1768-147-0x0000000002F50000-0x00000000037C7000-memory.dmp

      Filesize

      8.5MB

    • memory/1768-148-0x0000000000400000-0x0000000000C91000-memory.dmp

      Filesize

      8.6MB

    • memory/1768-149-0x0000000002B60000-0x0000000002F4B000-memory.dmp

      Filesize

      3.9MB