Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/02/2023, 09:10

General

  • Target

    9dada2f880e1f9051d3e020431d89250.exe

  • Size

    19KB

  • MD5

    9dada2f880e1f9051d3e020431d89250

  • SHA1

    a9c3b3577f5578cc8b7bf525fecc9a1146cb8755

  • SHA256

    aa0e0b9735614a120e1d49cd292470953e32f8d7b3fd299c0f7561400c4da72f

  • SHA512

    fdef7413233df7f54dae66748f05710f8a3f95430dfdc68834f5c819b80be95a63c8b5912b8d66e234c69d490081776ea960919a08c259f16d227466ae7be307

  • SSDEEP

    384:vYVYVMI6/FPXDIbE3oBOVzZKo6wzbaZNa0XGmGovy8ZpHOu2:qYVt6/RzID2zZ6SbSN9yiRT2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9dada2f880e1f9051d3e020431d89250.exe
    "C:\Users\Admin\AppData\Local\Temp\9dada2f880e1f9051d3e020431d89250.exe"
    1⤵
      PID:4500
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4500 -s 1168
        2⤵
        • Program crash
        PID:4824
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 424 -p 4500 -ip 4500
      1⤵
        PID:4412

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4500-132-0x000001D5FFBB0000-0x000001D5FFBB8000-memory.dmp

        Filesize

        32KB

      • memory/4500-133-0x00007FFB92CC0000-0x00007FFB93781000-memory.dmp

        Filesize

        10.8MB

      • memory/4500-134-0x00007FFB92CC0000-0x00007FFB93781000-memory.dmp

        Filesize

        10.8MB

      • memory/4500-135-0x00007FFB92CC0000-0x00007FFB93781000-memory.dmp

        Filesize

        10.8MB