94e03e068f2942547b0dddeece8cfd2b36ec8dfb082d389898de1fd228cfa656 | Triage

Analysis

max time kernel
221s
max time network
237s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 17:54

Sharing

Report Analysis Logs

General

Target

3274953c6f01a16c9f5e2556837e4e6c.exe
Size

417KB
MD5

3274953c6f01a16c9f5e2556837e4e6c
SHA1

5618c6ca8d831500bcb4cbb3e49b71954edac3e7
SHA256

94e03e068f2942547b0dddeece8cfd2b36ec8dfb082d389898de1fd228cfa656
SHA512

71e9a5df08db18c23678f0aea30ad4c83b881199bfbf6233198ea6a22bcc31cb3b9b9527a2048a72d67b7b975f16a0a48a0b08a99fed0041b98b16c25f247c8a
SSDEEP

12288:y/w6fh7DeX82M7/I+9jr/sJvs49nxUlMS:p6fh7SpY99jLsJU4IlMS

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4984	552	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\3274953c6f01a16c9f5e2556837e4e6c.exe
"C:\Users\Admin\AppData\Local\Temp\3274953c6f01a16c9f5e2556837e4e6c.exe"
1⤵
PID:552
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 268
  2⤵
  - Program crash
  PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 552 -ip 552
1⤵
PID:4924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/552-0-0x0000000000400000-0x00000000005FB000-memory.dmp

Filesize
2.0MB

Download
memory/552-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/552-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/552-3-0x0000000000400000-0x00000000005FB000-memory.dmp

Filesize
2.0MB

Download