0499d1402d14b519888bed8ec7af0d20efb50feded45c50daabfad0fb3bffba0 | Triage

Analysis

max time kernel
141s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 11:42

Sharing

Report Analysis Logs

General

Target

1ba6ad9fea238763d98d51961c48f532.exe
Size

800KB
MD5

1ba6ad9fea238763d98d51961c48f532
SHA1

4dfed81cad7b3ea065aa3d150786973337cdce04
SHA256

0499d1402d14b519888bed8ec7af0d20efb50feded45c50daabfad0fb3bffba0
SHA512

45b15bc3ac1088b3c366a87b62b5a3dda3149cacf7ba81c470aca20764768832a5f6ad611a3e93a8aa2a4f2c4b973d3a49f7efe9018a265c79f1e6103c881b88
SSDEEP

24576:jaEr6h/dxytaT64CiVqHiQq/2xUjs6t8NT:jVE//y/cVFFjE

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1372	2544	WerFault.exe	18

C:\Users\Admin\AppData\Local\Temp\1ba6ad9fea238763d98d51961c48f532.exe
"C:\Users\Admin\AppData\Local\Temp\1ba6ad9fea238763d98d51961c48f532.exe"
1⤵
PID:2544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 460
  2⤵
  - Program crash
  PID:1372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2544 -ip 2544
1⤵
PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2544-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2544-2-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2544-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download