7bfbb0862ee8fbb31fd0e756befa5b6ff0cdcbb93415641469e54e15f425cd22 | Triage

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 07:28

Sharing

Report Analysis Logs

General

Target

0ec193edcc53513e8da7dd1cd114a264.exe
Size

238KB
MD5

0ec193edcc53513e8da7dd1cd114a264
SHA1

d3398838e9219028a6c68d05b990a141f0a6d092
SHA256

7bfbb0862ee8fbb31fd0e756befa5b6ff0cdcbb93415641469e54e15f425cd22
SHA512

e83fba1aeff079516b0a673bc7aaa1993fc59576979d05a457ec416583c11aec46cf84bf5606009c89eda492d85530ce1bc2741fe56f5b15088233a769914bf4
SSDEEP

6144:COhX5Vp1dZrdUQLi/pptKNaW4lUEmIx/bjmB76j:COhJT1dtWEi/lmwfjOB6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process
3224	3204	WerFault.exe

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3204 -ip 3204
1⤵
PID:2872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 224
1⤵
- Program crash
PID:3224

C:\Users\Admin\AppData\Local\Temp\0ec193edcc53513e8da7dd1cd114a264.exe
"C:\Users\Admin\AppData\Local\Temp\0ec193edcc53513e8da7dd1cd114a264.exe"
1⤵
PID:3204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3204-0-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download
memory/3204-1-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download