bd9f22403b96084b8199d28c5301cd28ab844ad698c5b97b5c42336fabe655c7 | Triage

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/07/2023, 14:37

Sharing

Report Analysis Logs

General

Target

8ea99521ed9461_JC.exe
Size

985KB
MD5

8ea99521ed94614ead7fdbccf5db2f24
SHA1

da1a88eb6b519d61a9401fdf0e1e1f974bcdbd60
SHA256

bd9f22403b96084b8199d28c5301cd28ab844ad698c5b97b5c42336fabe655c7
SHA512

6d0b29f2dd1b5f967487a3de135d81ad3b196c9cf67496cea82113ca13602a917d2e270b55f67615c01129db249cef67bb5939c61b451321f877d5989e15c58b
SSDEEP

24576:Brr4FBDn2XkU/bleQfB96gYj+bES1x4dcAH3uRKOHd4CEJak:xr4FBj2LBCj+Yg4dzhO9TEJak

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4612	4976	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\8ea99521ed9461_JC.exe
"C:\Users\Admin\AppData\Local\Temp\8ea99521ed9461_JC.exe"
1⤵
PID:4976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 220
  2⤵
  - Program crash
  PID:4612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4976 -ip 4976
1⤵
PID:3232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4976-134-0x0000000000930000-0x0000000000A35000-memory.dmp

Filesize
1.0MB

Download
memory/4976-135-0x0000000000930000-0x0000000000A35000-memory.dmp

Filesize
1.0MB

Download
memory/4976-136-0x0000000000930000-0x0000000000A35000-memory.dmp

Filesize
1.0MB

Download
memory/4976-137-0x0000000000930000-0x0000000000A35000-memory.dmp

Filesize
1.0MB

Download