73e35dbd47e6d5d5323f906b5bccec29d393beb5fb3f65e628e84bf8a8f6942f | Triage

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 14:58

Sharing

Report Analysis Logs

General

Target

029aee446853077894ae7eb7464a8a60.exe
Size

239KB
MD5

029aee446853077894ae7eb7464a8a60
SHA1

059af4d2a45b262b427ca0c52bb99edd7e1f25df
SHA256

73e35dbd47e6d5d5323f906b5bccec29d393beb5fb3f65e628e84bf8a8f6942f
SHA512

44cfa590f1c8dfd471857ad8f9581013dcbb45120c7bfb859c2ee68b39050d0e11fb70b90372d0ee633f27a38c85ffee470de1c3125b35f1855c41c482c92068
SSDEEP

6144:xUwYJz99ePTUWbUgvf+sGWOWCKyduj6yA:xUwYNPePTUV8XtLCKyu6

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1864	4832	WerFault.exe	87
4424	4832	WerFault.exe	87

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4832 wrote to memory of 1864	4832	029aee446853077894ae7eb7464a8a60.exe	92
PID 4832 wrote to memory of 1864	4832	029aee446853077894ae7eb7464a8a60.exe	92
PID 4832 wrote to memory of 1864	4832	029aee446853077894ae7eb7464a8a60.exe	92

C:\Users\Admin\AppData\Local\Temp\029aee446853077894ae7eb7464a8a60.exe
"C:\Users\Admin\AppData\Local\Temp\029aee446853077894ae7eb7464a8a60.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 236
  2⤵
  - Program crash
  PID:1864
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 236
  2⤵
  - Program crash
  PID:4424

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4832 -ip 4832
1⤵
PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4832-0-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download
memory/4832-1-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download