99d3b285dacdb87ef9dd491966cbef13b36da52715bcf2db7b2c0b75322d7973 | Triage

Analysis

max time kernel
140s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 06:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0ba55085667434e18bc06060ad53495a.exe
Size

64KB
MD5

0ba55085667434e18bc06060ad53495a
SHA1

82452e0aee763775394a26cb50acf23a324bd710
SHA256

99d3b285dacdb87ef9dd491966cbef13b36da52715bcf2db7b2c0b75322d7973
SHA512

39be48b578b03f01a9b03361d55a7be840569b076639bee68afc98879dbeca66002b88668be67ceb89a0b4f08a46b311cb8bb4197ae6fc7821fe2e35f7275a7a
SSDEEP

1536:vAMEuWexTgdQ4ybk7yhiQO2/9GiR2LBsBMu/H1:dTCC4k8iqBaN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3924	1028	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\0ba55085667434e18bc06060ad53495a.exe
"C:\Users\Admin\AppData\Local\Temp\0ba55085667434e18bc06060ad53495a.exe"
1⤵
PID:1028
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1028 -s 404
  2⤵
  - Program crash
  PID:3924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 1028 -ip 1028
1⤵
PID:4072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1028-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/1028-1-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download