225ab67d5073c0321756301635e638eb461258ccf5cb2ec21f3cf5c3b2492dff | Triage

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 15:52

Sharing

Report Analysis Logs

General

Target

7a6e1f5df4ec5b1a655cd471504bfe4a.exe
Size

802KB
MD5

7a6e1f5df4ec5b1a655cd471504bfe4a
SHA1

99ec7ae3bdfc678f5e57c2ab59bffe6b4ab70c66
SHA256

225ab67d5073c0321756301635e638eb461258ccf5cb2ec21f3cf5c3b2492dff
SHA512

b3f1e22b0af05938793974853125a0e92d90adf685c4df70f9c6a7952359037397233d0c4abdf64d864b5ca6a27bb19da48164b7fe104418de89b6b0eac0f748
SSDEEP

24576:gkNVryyafOPvqdljbyEbA7DEfK2P6pPU8NT0:gKFyyacvqdUEwDiupBQ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1032	4604	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\7a6e1f5df4ec5b1a655cd471504bfe4a.exe
"C:\Users\Admin\AppData\Local\Temp\7a6e1f5df4ec5b1a655cd471504bfe4a.exe"
1⤵
PID:4604
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4604 -s 484
  2⤵
  - Program crash
  PID:1032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4604 -ip 4604
1⤵
PID:4484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4604-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4604-2-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4604-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download