Analysis

  • max time kernel
    83s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-03-2023 05:26

General

  • Target

    6fdd6f2c3085c356820653d11b87d831772b3f1733fa49adb6b4b9f8cf2a6ec3.exe

  • Size

    1.5MB

  • MD5

    7464af07a0ae8d444a40f5f734ffa23c

  • SHA1

    c183a90a191feccd25f8ac5cfba452bf0f1a718d

  • SHA256

    6fdd6f2c3085c356820653d11b87d831772b3f1733fa49adb6b4b9f8cf2a6ec3

  • SHA512

    7634a5d32e400a13a38bb6009b275647b59dce309b46089f5dbff506a22f4e9997e7e5ee886eba9d5d8c5a8b8be612134f7d31792e03ffddef10b8e46a44934a

  • SSDEEP

    24576:ozPaiHva3yZNG95MRLkiT1B9NtE3aUC4NXuJX+KQayWWN24xddkpJwewbtZUPAf9:yPMiHZkiT1B9Q/Fr2Em8eHPAf4GGts

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fdd6f2c3085c356820653d11b87d831772b3f1733fa49adb6b4b9f8cf2a6ec3.exe
    "C:\Users\Admin\AppData\Local\Temp\6fdd6f2c3085c356820653d11b87d831772b3f1733fa49adb6b4b9f8cf2a6ec3.exe"
    1⤵
      PID:4216
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4216 -s 1164
        2⤵
        • Program crash
        PID:3368
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4216 -ip 4216
      1⤵
        PID:2228

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4216-133-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-135-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-134-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-136-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-137-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-138-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-140-0x0000000002670000-0x0000000002671000-memory.dmp
        Filesize

        4KB

      • memory/4216-149-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB

      • memory/4216-150-0x0000000002670000-0x0000000002671000-memory.dmp
        Filesize

        4KB

      • memory/4216-155-0x0000000000400000-0x00000000008DE000-memory.dmp
        Filesize

        4.9MB