14a8d98b24803f047ab7db4a49715a31660afd9b9d74b0e9dbbd3082892b7455 | Triage

Analysis

max time kernel
62s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2023, 02:21

Sharing

Report Analysis Logs

General

Target

5504b83fbc4e428cae21464fcd847c38c4950550.exe
Size

408KB
MD5

e40ce66e908668b0c4d798ae86e4ad48
SHA1

5504b83fbc4e428cae21464fcd847c38c4950550
SHA256

14a8d98b24803f047ab7db4a49715a31660afd9b9d74b0e9dbbd3082892b7455
SHA512

c8f26626a9826f20d1c8c631237da434e77a8b84c172428af7105d8e76cb22a2bd47c5c4feb999a261354f9494fd2eb4fdd9b5da7c871d0107a9bbabc76689f3
SSDEEP

12288:aqyuF2dxmh6ZfYqAlSnshDHDJIxFunmcqOOi:lsmhmdshH90umq3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4928	1560	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\5504b83fbc4e428cae21464fcd847c38c4950550.exe
"C:\Users\Admin\AppData\Local\Temp\5504b83fbc4e428cae21464fcd847c38c4950550.exe"
1⤵
PID:1560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1560 -s 508
  2⤵
  - Program crash
  PID:4928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1560 -ip 1560
1⤵
PID:3792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-132-0x0000000000410000-0x0000000000502000-memory.dmp

Filesize
968KB

Download