cfe90e9b4dd78483cf11b9f68e978907f1bf5602e73e0fd3368340d409d4310e | Triage

Analysis

max time kernel
144s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 07:27

Sharing

Report Analysis Logs

General

Target

0ebefc9744bef5d707e1dfd9d30bfd95.exe
Size

216KB
MD5

0ebefc9744bef5d707e1dfd9d30bfd95
SHA1

ee869c40160ecd1e92a0e9b7f95b15f4c45e3e01
SHA256

cfe90e9b4dd78483cf11b9f68e978907f1bf5602e73e0fd3368340d409d4310e
SHA512

9737128af00fa418410c30ff4753290b1e021344710ee802fba2ce5b189b06f6808d680e4e6bbad0ac5ccebabee33db42f1eeb5d0f4f0510708fdb004854747f
SSDEEP

6144:5WmY0snba+a6uxpc89pKf/Yt69v4ytGmc:5WmzsUxi4KfSuv4qGmc

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1232 4372 WerFault.exe 0ebefc9744bef5d707e1dfd9d30bfd95.exe

C:\Users\Admin\AppData\Local\Temp\0ebefc9744bef5d707e1dfd9d30bfd95.exe
"C:\Users\Admin\AppData\Local\Temp\0ebefc9744bef5d707e1dfd9d30bfd95.exe"
1⤵
PID:4372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4372 -s 292
2⤵
- Program crash
PID:1232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4372 -ip 4372
1⤵
PID:436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...