bcfe6ac0557eb21352e8355d8ec1126249b46a112df39e5c4eaaa8c3ca69aa4c | Triage

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10-01-2023 02:17

Sharing

Report Analysis Logs

General

Target

acb8aa1fd120962af8ab3845ce88f356d2493658.exe
Size

408KB
MD5

b31ae713fab9b8b9fef577054ec2d971
SHA1

acb8aa1fd120962af8ab3845ce88f356d2493658
SHA256

bcfe6ac0557eb21352e8355d8ec1126249b46a112df39e5c4eaaa8c3ca69aa4c
SHA512

230cf86ed693060ef06987d58b7a4beacfddc46e0da572ed284eb1f1442ed7693191f3b1f2389e1b103ef4626829db5e63c615509b0700a9c3644edfd93c923c
SSDEEP

12288:8qyuF2dxmh6ZfYqAlSnshDJDJIxFunmcqOOi:PsmhmdshJ90umq3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4708	4724	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\acb8aa1fd120962af8ab3845ce88f356d2493658.exe
"C:\Users\Admin\AppData\Local\Temp\acb8aa1fd120962af8ab3845ce88f356d2493658.exe"
1⤵
PID:4724
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 508
  2⤵
  - Program crash
  PID:4708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4724 -ip 4724
1⤵
PID:4640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4724-132-0x0000000000410000-0x0000000000502000-memory.dmp

Filesize
968KB

Download