Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 12:19

General

  • Target

    b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe

  • Size

    37KB

  • MD5

    daac4034f78c8fd2b6e913cf9b0131c2

  • SHA1

    8604279c5e7735fa0416fd43d52231824f5fb451

  • SHA256

    b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494

  • SHA512

    1ab77dc1d5a2788fa6bdf3f78957a4b65f2a49ed8baf539c7f845ea0543122286dc621672eb848ba4573d36ad93cf47a9aaaf074d23555e9fb865ad9004520fa

  • SSDEEP

    768:9/4jXS1/UfKXgr9JX4h79KzNu7yVmiS805jvom:9sXS1sfKXgrvXoZ97aPSf5bF

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe
    "C:\Users\Admin\AppData\Local\Temp\b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe"
    1⤵
      PID:2036
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 836
        2⤵
        • Program crash
        PID:4876
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2036 -ip 2036
      1⤵
        PID:2740

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/2036-1-0x00000000748A0000-0x0000000075050000-memory.dmp

              Filesize

              7.7MB

            • memory/2036-0-0x0000000000FC0000-0x0000000000FD0000-memory.dmp

              Filesize

              64KB

            • memory/2036-2-0x0000000005F80000-0x0000000006524000-memory.dmp

              Filesize

              5.6MB

            • memory/2036-3-0x00000000059D0000-0x0000000005A62000-memory.dmp

              Filesize

              584KB

            • memory/2036-4-0x00000000748A0000-0x0000000075050000-memory.dmp

              Filesize

              7.7MB