ef931c95f81c4757bdff9b739eb86340cd3a44dc8bb517320c566365836db4f4 | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2023, 02:22

Sharing

Report Analysis Logs

General

Target

ed738013267ef1213ad4569dbfc49fcddbed1766.exe
Size

392KB
MD5

dd170fa07c4f181bdfa2f170c287e91a
SHA1

ed738013267ef1213ad4569dbfc49fcddbed1766
SHA256

ef931c95f81c4757bdff9b739eb86340cd3a44dc8bb517320c566365836db4f4
SHA512

bcde3d86187e084ad703bcc6685f2ea19f6e8f0997da8f674ad7b9c7b9c7f62cc34bb79aabb74c2333c624dab6aedbd78d61eb0644e9f5e5fd079951d55e46e8
SSDEEP

12288:SDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:OR9eyWKwkJxruLUb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1304	5112	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\ed738013267ef1213ad4569dbfc49fcddbed1766.exe
"C:\Users\Admin\AppData\Local\Temp\ed738013267ef1213ad4569dbfc49fcddbed1766.exe"
1⤵
PID:5112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5112 -s 376
  2⤵
  - Program crash
  PID:1304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5112 -ip 5112
1⤵
PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads