bb10d1876255ac5c7beb971b9c3f748976eef78067690392f36e698939331ac1 | Triage

Analysis

max time kernel
91s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
15-10-2022 01:51

Sharing

Report Analysis Logs

General

Target

Server_se.exe
Size

880KB
MD5

53460de37325b4979177f832ae51f9de
SHA1

f32dd3e711e5fc24c3e525ab835c83588cbc1558
SHA256

bb10d1876255ac5c7beb971b9c3f748976eef78067690392f36e698939331ac1
SHA512

19a489017baaa2adb1c9cf75a502725a28193e4a0661b8f7956169084884e82e07d9b980091d1f8c307cb6f7ae7e7bb3fd3012db0a30dedbe30621f1f60f1595
SSDEEP

24576:7stUx5NK+HjoSIIJ2thqogNSNOKt5apf7xesN7:gtIS+dJgRkSNO0Qpow

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2168 1344 WerFault.exe Server_se.exe

C:\Users\Admin\AppData\Local\Temp\Server_se.exe
"C:\Users\Admin\AppData\Local\Temp\Server_se.exe"
1⤵
PID:1344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1344 -s 480
2⤵
- Program crash
PID:2168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1344 -ip 1344
1⤵
PID:3344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1344-132-0x0000000000400000-0x0000000000529000-memory.dmp

Filesize
1.2MB

Download
memory/1344-133-0x0000000077140000-0x00000000772E3000-memory.dmp

Filesize
1.6MB

Download
memory/1344-134-0x0000000076660000-0x0000000076875000-memory.dmp

Filesize
2.1MB

Download
memory/1344-136-0x0000000000400000-0x0000000000529000-memory.dmp

Filesize
1.2MB

Download