f157090fd3ccd4220298c06ce8734361b724d80459592b10ac632acc624f455e | Triage

Analysis

max time kernel
65s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-01-2023 07:22

Sharing

Report Analysis Logs

General

Target

AdFind.exe
Size

2.0MB
MD5

5483da573c6a239f9a5d6e6552b307b0
SHA1

c2eaca8799d335954ef3d9a1867ec1b629ca4f1a
SHA256

f157090fd3ccd4220298c06ce8734361b724d80459592b10ac632acc624f455e
SHA512

226f81500f784e8c94eefdd865129172c06f99a510bcc9b563af2d3be0ade0ba581946880253d7dc8e5e36e7382cce047a152c9665f00ca4750352a4926d44d1
SSDEEP

49152:1U1Aj7FtVurOjYoPCMqtUtRyVw8Iqdwjyg8tX1ja2Gnm23i6xIVlH:1eQ8qjX6MnyVwCd/tX

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1248 3220 WerFault.exe

C:\Users\Admin\AppData\Local\Temp\AdFind.exe
"C:\Users\Admin\AppData\Local\Temp\AdFind.exe"
1⤵
PID:4844

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 3220 -ip 3220
1⤵
PID:4412

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3220 -s 1764
1⤵
- Program crash
PID:1248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads