e5f959630fb0b8caa2086f9b3f6ed3f7f236ccf856ce09c3782ce8890ab21eb1 | Triage

Analysis

max time kernel
140s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2023, 02:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

89880ee972f569751654f777c0b75b373dca2e21.exe
Size

408KB
MD5

c51f5b0716a8eeb57aa87b5d505219c2
SHA1

89880ee972f569751654f777c0b75b373dca2e21
SHA256

e5f959630fb0b8caa2086f9b3f6ed3f7f236ccf856ce09c3782ce8890ab21eb1
SHA512

e2bf1883698d3c17196712377fdad938c1fde37e48b4d0d182beb1c63b440d1cf0680f1445208206e7add3d118c63657a69808b602bb5bfe467b8a2b4fec8128
SSDEEP

12288:qhmjgh6pQscHg+yeTYXxLLVfsZvTmROE:7UHg+wzfsBmZ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4876	3048	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\89880ee972f569751654f777c0b75b373dca2e21.exe
"C:\Users\Admin\AppData\Local\Temp\89880ee972f569751654f777c0b75b373dca2e21.exe"
1⤵
PID:3048
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 520
  2⤵
  - Program crash
  PID:4876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3048 -ip 3048
1⤵
PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3048-132-0x0000000000410000-0x0000000000502000-memory.dmp

Filesize
968KB

Download