05d3835664225981839520fdfe68abe1134f35ef6e05c3747aff1ecbe9f005b4 | Triage

Analysis

max time kernel
131s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

04addf2f6e094883c3f9dffe0a769d41.exe
Size

770KB
MD5

04addf2f6e094883c3f9dffe0a769d41
SHA1

6d49722532fa55986810ce18a2208b8c82f423f7
SHA256

05d3835664225981839520fdfe68abe1134f35ef6e05c3747aff1ecbe9f005b4
SHA512

134d2d2e1d0bcd88dbdd108929dde5739b0e7669119ed313c89822b1ed3e341be50af52ea857edcc7c4222b67b0690d85b7d23cba145bfd7662ba192ed72ba5b
SSDEEP

24576:j+BHxT2TnfSa6SkOcAYYwk9eMz5mBYWN2Tl:j+BHxTqnFXLwkXKN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4980	2600	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\04addf2f6e094883c3f9dffe0a769d41.exe
"C:\Users\Admin\AppData\Local\Temp\04addf2f6e094883c3f9dffe0a769d41.exe"
1⤵
PID:2600
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2600 -s 392
  2⤵
  - Program crash
  PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2600 -ip 2600
1⤵
PID:5112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads