e71eba9f1a6afd930acf53b8aac467f256735ec0a52011934d9a5da38555ce61 | Triage

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01-11-2022 15:23

Sharing

Report Analysis Logs

General

Target

oos.exe
Size

504KB
MD5

af1e6840f7351cf6ade207de11a9983f
SHA1

dbc4f725029b7243c4297f668a1ad3b9dfdecd4d
SHA256

e71eba9f1a6afd930acf53b8aac467f256735ec0a52011934d9a5da38555ce61
SHA512

b4d4b46a7211f8032f5e8871218445046334024b3dc40b8ac7d0ff056aefe3f46dd0c602e003d3b71024d85a6f5e1004e3b604f8ddb0283e407e352905f7db27
SSDEEP

6144:E/Ya3uK4MW5sl80PF2hV/4puXyjSJ5DwFiyycdFXErWlsAOZZgjXAcjgXy6N:E/YaejslPd2f/4njSJJwLZ5sfZgwrN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1284 3564 WerFault.exe oos.exe

C:\Users\Admin\AppData\Local\Temp\oos.exe
"C:\Users\Admin\AppData\Local\Temp\oos.exe"
1⤵
PID:3564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3564 -s 532
2⤵
- Program crash
PID:1284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3564 -ip 3564
1⤵
PID:4936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...