446178adbb3136633fda65f5b4b27002da3098ad72c0d18d22d4c566e3c0c18e | Triage

Analysis

max time kernel
145s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2023 05:22

Sharing

Report Analysis Logs

General

Target

574089ef40e6bc17ca242e33bd8bdd76.exe
Size

1.4MB
MD5

574089ef40e6bc17ca242e33bd8bdd76
SHA1

0d3f9aaa02cbf1f6fd3155e15b63cccd1a718a4a
SHA256

446178adbb3136633fda65f5b4b27002da3098ad72c0d18d22d4c566e3c0c18e
SHA512

9563e3e81f9f09bd38b46b55d325cf720d51ac4324d3bc7984e79f44b312c47d573365304571c3ce36349c5cd480352eb4cb8c1b5004cc92b0aa1c2e06386f07
SSDEEP

24576:Vxqk06jz7Yelvv5k5LeOGdo6+xvTwrlF1jCirN3dDV:V77tvvqqOh0hvjnT

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4356	4280	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\574089ef40e6bc17ca242e33bd8bdd76.exe
"C:\Users\Admin\AppData\Local\Temp\574089ef40e6bc17ca242e33bd8bdd76.exe"
1⤵
PID:4280
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 428
  2⤵
  - Program crash
  PID:4356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4280 -ip 4280
1⤵
PID:884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4280-0-0x000000002A5E0000-0x000000002A6D0000-memory.dmp

Filesize
960KB

Download