4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows10_x64
resource
win10
submitted
29-06-2020 07:28

Sharing

Report Analysis Logs

General

Target

4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe
Size

319KB
MD5

9b1262b03bfd7a76fc99cc464558ae0d
SHA1

689495fd29a39b1073a1b7ad1dde87c7d2d8db82
SHA256

4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a
SHA512

79353920a104baf336044b279704e476f168486d287150b55e2e480796317c47af3f3c98f71c29945f5e978401f9ea34f898dc39730037405dd764cebcb5880d

Score

3^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe

pid process

3904 4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1968 3904 WerFault.exe 4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe

C:\Users\Admin\AppData\Local\Temp\4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe
"C:\Users\Admin\AppData\Local\Temp\4544ada7458cad0c5a467b9bff1ac1a25f959e35c41a04298738195f93d7899a.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 708
2⤵
- Program crash
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...