78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23 | Triage

Analysis

max time kernel
200s
max time network
208s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:13

Sharing

Report Analysis Logs

General

Target

file.exe
Size

1.2MB
MD5

64245815b907d80151c520a10f3e83b0
SHA1

978170de87dfd5135cf0b3da9fb7900453caf1ec
SHA256

78f4cb6ed265c721890f28d96e33ce8b2defae0d8c71eaafbbc75199ca270d23
SHA512

280812154ff14668d152552aff58b6c631a7e2c4bcb98b86eea48179957da1b7901d0d32cfcc59ff7d3da65736a95fa32103b292b0da5dcfe0efea619914ec78
SSDEEP

24576:DjryZExuywyuvh9AVtjmSNXPIq7k2dzeFuUFOqdD3Gv:DjryZExF/qSN/Iq4eeFXFtD2v

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1076 1776 WerFault.exe file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:1776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1776 -s 436
2⤵
- Program crash
PID:1076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1776 -ip 1776
1⤵
PID:4444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...