79e0ff2b1c2c59fb9a05f8871da761e4d0fcff8c217c455ea8d9ffccd0d159ef | Triage

Analysis

max time kernel
182s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 01:13

Sharing

Report Analysis Logs

General

Target

1fa7ee3c1ff8e652415e590f1ced8bd5.exe
Size

235KB
MD5

1fa7ee3c1ff8e652415e590f1ced8bd5
SHA1

38b27a44aaa7509833ce91d3076bdc4685be87e1
SHA256

79e0ff2b1c2c59fb9a05f8871da761e4d0fcff8c217c455ea8d9ffccd0d159ef
SHA512

b06631f3df86936506a069f800f14fae92893ab770d8064cd040dc3de35945cc7fcbf9ce9a5d7642a574fd2faa1a86d1cd6210b4b0f2420a45aa55c38ff0cf10
SSDEEP

6144:9OGsqc6xN2yejYnleyJLnSQHsEkeRnGNFg:9vk9qL6EkekF

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3000	4520	WerFault.exe	48

C:\Users\Admin\AppData\Local\Temp\1fa7ee3c1ff8e652415e590f1ced8bd5.exe
"C:\Users\Admin\AppData\Local\Temp\1fa7ee3c1ff8e652415e590f1ced8bd5.exe"
1⤵
PID:4520
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 224
  2⤵
  - Program crash
  PID:3000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4520 -ip 4520
1⤵
PID:4864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4520-0-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download
memory/4520-1-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download