81b90c17cefa9a684ddfcfc92d02ce93b4a7f18dbd19d49f94dcafad45b23457 | Triage

Analysis

max time kernel
135s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10-01-2023 01:56

Sharing

Report Analysis Logs

General

Target

f54acf77dcdd2154b5e33797286f8c1610acff3f.exe
Size

444KB
MD5

fd8f9c46c3ef8fbba3b1ab05d686c7ba
SHA1

f54acf77dcdd2154b5e33797286f8c1610acff3f
SHA256

81b90c17cefa9a684ddfcfc92d02ce93b4a7f18dbd19d49f94dcafad45b23457
SHA512

ac22c503bd8879c105b476ca182e755eaf3cd3d3a04a5b7edcab6c11c4585e2fa9c3e1bb947f757f0354424b58f456f8518d1d400d97ae1b809da578c4446c19
SSDEEP

12288:NiqaAmD33TS09+KWl8Zunrdyx+umyag6:DafDnWU6l8Zuxy45g6

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2356	4752	WerFault.exe	81
3164	4752	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\f54acf77dcdd2154b5e33797286f8c1610acff3f.exe
"C:\Users\Admin\AppData\Local\Temp\f54acf77dcdd2154b5e33797286f8c1610acff3f.exe"
1⤵
PID:4752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 504
  2⤵
  - Program crash
  PID:2356
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 512
  2⤵
  - Program crash
  PID:3164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4752 -ip 4752
1⤵
PID:3536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4752 -ip 4752
1⤵
PID:4644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4752-132-0x0000000000410000-0x00000000004E1000-memory.dmp

Filesize
836KB

Download