62b4869416a8df2f542fe70a535bb6ccf3afcbaaaad1bf45265df8914f1d06d0 | Triage

Analysis

max time kernel
147s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
28/12/2023, 21:15

Sharing

Report Analysis Logs

General

Target

f8a85596c8bbbe69d17f5bf073cfd844.exe
Size

68KB
MD5

f8a85596c8bbbe69d17f5bf073cfd844
SHA1

3dd84e9afa89b65fc03c34289601813a0b2d7f66
SHA256

62b4869416a8df2f542fe70a535bb6ccf3afcbaaaad1bf45265df8914f1d06d0
SHA512

6c4414fbde39ebd3807fbfe8cddfc8ea27203c4f82ff6d7671f5dc35e50df8feda848a849c8b0152ef5ca0e1290ce4ca48cb528918df35d07f8bf2cd4cb2e06d
SSDEEP

1536:UfRJODQN4XL1NoVmVMEL+UrMlschkteYbBIxe:Ufir1NoVl9/lnyAYbB1

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1128	2244	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\f8a85596c8bbbe69d17f5bf073cfd844.exe
"C:\Users\Admin\AppData\Local\Temp\f8a85596c8bbbe69d17f5bf073cfd844.exe"
1⤵
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 216
  2⤵
  - Program crash
  PID:1128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 2244 -ip 2244
1⤵
PID:432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2244-0-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download