Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-08-2023 11:08

General

  • Target

    a21ec9f05ca2b0f0ab49c7066e3846a6b6403f28eeeaffbd1cee0e5a04daa870.exe

  • Size

    4.6MB

  • MD5

    d75648f53d6bcb93c9c1d80acf8c6098

  • SHA1

    cc112eae1f9fe8f8c17988fa929b8f97c1ce3620

  • SHA256

    a21ec9f05ca2b0f0ab49c7066e3846a6b6403f28eeeaffbd1cee0e5a04daa870

  • SHA512

    959767601b2e7067aa193a55e09647c0618f75e954715f30cad73613f6b19e37e473222597cad7721be9bba186e728c65a2e307b9d764c05102b5fd64dc9bea0

  • SSDEEP

    24576:qTy+SejCnQ9/9NjEOSjiR6x44cGHvFN4RTIZw9B3:cWOIx4FlF3

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a21ec9f05ca2b0f0ab49c7066e3846a6b6403f28eeeaffbd1cee0e5a04daa870.exe
    "C:\Users\Admin\AppData\Local\Temp\a21ec9f05ca2b0f0ab49c7066e3846a6b6403f28eeeaffbd1cee0e5a04daa870.exe"
    1⤵
      PID:1992
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 228
        2⤵
        • Program crash
        PID:2388
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1992 -s 232
        2⤵
        • Program crash
        PID:264
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1992 -ip 1992
      1⤵
        PID:4868
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1992 -ip 1992
        1⤵
          PID:3956

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1992-133-0x0000000000400000-0x0000000001DFC000-memory.dmp

          Filesize

          26.0MB