Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 06:51

General

  • Target

    SBO10_0_CR_EXPORT_x64.exe

  • Size

    17KB

  • MD5

    cc4539e295ae5b6d6a9ff1e928172e3e

  • SHA1

    abd1171e9b440608485c3c4cd934d0480a654c48

  • SHA256

    cd68b436fa7e71eca64ec90a4e566e459b6db3bc715fbb429bd11f2ffbd69015

  • SHA512

    20474ae03785cc34467c078f625306a13a1909689c229e7061bded87d2ad1475e2fa737f99f94e1a3c929e666ea0fb26095162b2081175009fd922e13af4efee

  • SSDEEP

    384:G6w0z1oYmTt1NHcRyPRYJEqfrTPr+T/1LJ6MV:G0At1NHWJEkOT/NJ6MV

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SBO10_0_CR_EXPORT_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\SBO10_0_CR_EXPORT_x64.exe"
    1⤵
      PID:3612
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3612 -s 848
        2⤵
        • Program crash
        PID:1808
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3612 -ip 3612
      1⤵
        PID:2356

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3612-133-0x0000000000A60000-0x0000000000A6A000-memory.dmp

              Filesize

              40KB