Analysis

  • max time kernel
    127s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-08-2023 18:05

General

  • Target

    8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe

  • Size

    1.8MB

  • MD5

    08a7481c0cab5e4964e5c02a2069cd35

  • SHA1

    5f89817d7373ce51c87dd61a37261b4a9902884d

  • SHA256

    8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3

  • SHA512

    a6ec7d0c3d8f97bcc53a56a609d8df8102fe3b65faac0a81f0142f3bf4499e50d442fa454884750c8a7a281c0d1913d8360f749c99fb23e290564b203ae3fdee

  • SSDEEP

    24576:6lKmygBrATMXoRnHPWwwMp6aIY4In2VSfAGyuP4SLhSJ1DFe/ZTAnWgMX7LxXJC9:wWG47xIY4u2wfj4SLaReBT/nX7LxXJ

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe
    "C:\Users\Admin\AppData\Local\Temp\8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe"
    1⤵
      PID:1532
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 572
        2⤵
        • Program crash
        PID:4108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 612
        2⤵
        • Program crash
        PID:3344
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 348 -p 1532 -ip 1532
      1⤵
        PID:2052
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1532 -ip 1532
        1⤵
          PID:1840

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1532-0-0x0000000000910000-0x0000000000AE97F5-memory.dmp

          Filesize

          1.8MB

        • memory/1532-1-0x0000000000910000-0x0000000000AE97F5-memory.dmp

          Filesize

          1.8MB