07223fec6e1ed9c487dfdc973792a24ea7e9ba30b05ee70a387c704db56c9dca | Triage

Analysis

max time kernel
127s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2023, 02:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8add3471cf679294cdefcffb3b9bd990677c7188.exe
Size

393KB
MD5

e0919d554b3b4d196aa043f7a5d2bfed
SHA1

8add3471cf679294cdefcffb3b9bd990677c7188
SHA256

07223fec6e1ed9c487dfdc973792a24ea7e9ba30b05ee70a387c704db56c9dca
SHA512

23f857b3e6f465d776de9b1a5a1fb84da005aacac5329366be192b45b65bab88278aed4ed451dcfed659cac2509b6724cadf4be1ce6d0d5c7c01d74720c2cbcc
SSDEEP

12288:/wg7dUmmLen1G6Lkjr7plWzuDRsVq+ej+:4g7dkenE6Qf7fpuJJ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1400	2576	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\8add3471cf679294cdefcffb3b9bd990677c7188.exe
"C:\Users\Admin\AppData\Local\Temp\8add3471cf679294cdefcffb3b9bd990677c7188.exe"
1⤵
PID:2576
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2576 -s 332
  2⤵
  - Program crash
  PID:1400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 2576 -ip 2576
1⤵
PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads