Analysis

  • max time kernel
    98s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-11-2023 19:46

General

  • Target

    554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe

  • Size

    375KB

  • MD5

    fd36e16bd6a199b8289a7bdfd45de021

  • SHA1

    02a6ededf69d3d4dcce52b4c1261c2a9b15cba3c

  • SHA256

    554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875

  • SHA512

    c2d4768de725b098dd78443de6c8f350bf366fc1c8813bce6cebf8773cd54cd470680a7b8c3399735f2ec52a71b5ab97da9e5253298ec428f07e7d6effffdc16

  • SSDEEP

    6144:qaq8vzvMEQ2MQEObF6CX6pQFeE6dtRtWvOMo9g4lSpzceUD4bVZ3PSNb2b0jexOO:qaqmzvMEQ2MQEObF6CX6pQFeE6dv2AIH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe
    "C:\Users\Admin\AppData\Local\Temp\554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe"
    1⤵
      PID:4248
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4248 -s 888
        2⤵
        • Program crash
        PID:1372
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4248 -ip 4248
      1⤵
        PID:4804

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4248-1-0x0000000074F10000-0x00000000756C0000-memory.dmp

        Filesize

        7.7MB

      • memory/4248-0-0x0000000000810000-0x0000000000874000-memory.dmp

        Filesize

        400KB

      • memory/4248-2-0x0000000074F10000-0x00000000756C0000-memory.dmp

        Filesize

        7.7MB