Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/09/2023, 10:37

General

  • Target

    91c5e360ed134bc6a7e7a716a27bc8d747308a48a4c0244ef919604720bda5b5.exe

  • Size

    2.5MB

  • MD5

    eee45ed345fd14bcc09ec04554186d6c

  • SHA1

    7f9522ada37b9baedac59a5d1052c6ff27d5a0d8

  • SHA256

    91c5e360ed134bc6a7e7a716a27bc8d747308a48a4c0244ef919604720bda5b5

  • SHA512

    c0299f3927ec63f470ee342c1fbe3f21939f8acd1be6d3009b06bcc170d50dbe367467912a6eb088c99ab69668d7ed80a167c938e39880b04b314d9142ae15d8

  • SSDEEP

    49152:FWjV3FJy4JnPmlG4xD8LlS8D09BSd+3nQ1j7CZgNe48WT/bCC:EY+nPmlG4xD8LlSFHh3nQ5eZgH7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\91c5e360ed134bc6a7e7a716a27bc8d747308a48a4c0244ef919604720bda5b5.exe
    "C:\Users\Admin\AppData\Local\Temp\91c5e360ed134bc6a7e7a716a27bc8d747308a48a4c0244ef919604720bda5b5.exe"
    1⤵
      PID:1140
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1140 -s 256
        2⤵
        • Program crash
        PID:4744
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1140 -ip 1140
      1⤵
        PID:4340

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1140-0-0x0000000000400000-0x0000000000B9B000-memory.dmp

        Filesize

        7.6MB