2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc | Triage

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
04/06/2023, 17:26

Sharing

Report Analysis Logs

General

Target

72ceccc9998a49d984bf8648262304f5.exe
Size

260KB
MD5

72ceccc9998a49d984bf8648262304f5
SHA1

3c37827070f8d4eb726f59a0d4f2db0d8f1232ca
SHA256

2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc
SHA512

f7cc1322e1132bd07290ea494d70fc9f358c7f7e6667656122e5dde93b236a968c97446e8003add8055122847e633e8a4d86bb33d44c3cce9ca71c8a1083bb74
SSDEEP

3072:x6sSW20yS19d7Y5fLagUTxegZtSR/E4jOC:QsSWZ19d7Y55UTx7Zta/

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2456	4940	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\72ceccc9998a49d984bf8648262304f5.exe
"C:\Users\Admin\AppData\Local\Temp\72ceccc9998a49d984bf8648262304f5.exe"
1⤵
PID:4940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 764
  2⤵
  - Program crash
  PID:2456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4940 -ip 4940
1⤵
PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4940-134-0x0000000002D70000-0x0000000002D8D000-memory.dmp

Filesize
116KB

Download
memory/4940-135-0x0000000000400000-0x0000000002CE8000-memory.dmp

Filesize
40.9MB

Download