9b2b4387bf0fd8a3f4959110fba3330e119357325ae1f4824dff413b528a8e70 | Triage

Analysis

max time kernel
90s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
08/02/2023, 07:56

Sharing

Report Analysis Logs

General

Target

Com.Lenovo.Endpoint.PerformanceMonitor.exe
Size

416KB
MD5

c539e178969ac57926b695852b2a8d9e
SHA1

5bf4b226b0a59c008be664ea22fad55767a9ad05
SHA256

9b2b4387bf0fd8a3f4959110fba3330e119357325ae1f4824dff413b528a8e70
SHA512

935b7e4f97f0f9860f957533d23347d2c1fa0ef327fa936fceaa72684d5afef04c69c5158a6855df4502529c8dcef4c08c8e5f92d9b8134b0d32971bed854a7b
SSDEEP

3072:lgDgrTQ9TRzNJZ2V5sTq9TRdNJZ2Vz0WJiSXxs:loR918P1978qb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4860	3440	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\Com.Lenovo.Endpoint.PerformanceMonitor.exe
"C:\Users\Admin\AppData\Local\Temp\Com.Lenovo.Endpoint.PerformanceMonitor.exe"
1⤵
PID:3440
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3440 -s 1012
  2⤵
  - Program crash
  PID:4860

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 476 -p 3440 -ip 3440
1⤵
PID:4816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3440-132-0x00000209B6950000-0x00000209B69BC000-memory.dmp

Filesize
432KB

Download
memory/3440-133-0x00007FFAFA6A0000-0x00007FFAFB161000-memory.dmp

Filesize
10.8MB

Download
memory/3440-134-0x00007FFAFA6A0000-0x00007FFAFB161000-memory.dmp

Filesize
10.8MB

Download