7122b6f7f6e9c1d590c434b00bc82c7d1e86c25b58e89479dacdb56f52cdf0d8 | Triage

Analysis

max time kernel
105s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-01-2023 22:22

Sharing

Report Analysis Logs

General

Target

tmp.exe
Size

240KB
MD5

d948296c9d69f1fc3922b0402c6aec69
SHA1

c0d865f544b737bf4e0cdf1ec8a3d019c0f26792
SHA256

7122b6f7f6e9c1d590c434b00bc82c7d1e86c25b58e89479dacdb56f52cdf0d8
SHA512

33626b1e7bafbc4627417b00f3aa2c1d583a6d63e8ebc3e73f6da7b6f96cc035b7425ffa1e955a790462a126b901fe4a1d71b873ed097d1b6df9cf76270bf64a
SSDEEP

3072:DXRYQOLftYaEcin5uo8p4XIVAJkWzAeRblD49Ip9PcmquKG6R27hZY:7ALXEcQXISkbiD4WTwGpZY

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5096	3836	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
PID:3836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3836 -s 1000
  2⤵
  - Program crash
  PID:5096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3836 -ip 3836
1⤵
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3836-132-0x00000000006AD000-0x00000000006BE000-memory.dmp

Filesize
68KB

Download
memory/3836-133-0x00000000005F0000-0x000000000060C000-memory.dmp

Filesize
112KB

Download
memory/3836-134-0x0000000000400000-0x0000000000459000-memory.dmp

Filesize
356KB

Download
memory/3836-135-0x00000000006AD000-0x00000000006BE000-memory.dmp

Filesize
68KB

Download