Analysis

  • max time kernel
    51s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-03-2023 19:37

General

  • Target

    4cb91df3f13ff362903e62687ef6bca610a251f6bae5df8cae57fba317e0b40a.exe

  • Size

    560KB

  • MD5

    f0548aa5a3a80325538f852f127de672

  • SHA1

    2b426978e0810ec2d23b23255d731bb9541dedf1

  • SHA256

    4cb91df3f13ff362903e62687ef6bca610a251f6bae5df8cae57fba317e0b40a

  • SHA512

    7c8175e6c7def9ae8cc2d8c33275e3107351b4a211424402d0d3b4b53cfe2eb1a2c5f4f4e3562b8bd5ce9b042295b9e84f193e3aff7549e8ce60466ea653507e

  • SSDEEP

    12288:EqZw6HBtzJj09unpfPJiUqc037/guyJcFi7gjiRpEj554xC6k7:8mzcsPJxqd37/DyJqiKPOC6k7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4cb91df3f13ff362903e62687ef6bca610a251f6bae5df8cae57fba317e0b40a.exe
    "C:\Users\Admin\AppData\Local\Temp\4cb91df3f13ff362903e62687ef6bca610a251f6bae5df8cae57fba317e0b40a.exe"
    1⤵
      PID:2156
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2156 -s 880
        2⤵
        • Program crash
        PID:3564
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2156 -ip 2156
      1⤵
        PID:2252

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2156-133-0x0000000000E00000-0x0000000000E92000-memory.dmp
        Filesize

        584KB

      • memory/2156-134-0x00000000081A0000-0x0000000008744000-memory.dmp
        Filesize

        5.6MB

      • memory/2156-135-0x0000000007CD0000-0x0000000007D62000-memory.dmp
        Filesize

        584KB

      • memory/2156-136-0x0000000005790000-0x00000000057A0000-memory.dmp
        Filesize

        64KB