e39c30a6feb9d9e4abc1e6050e11324c82bc136b85672062a0ff27a69502d8a0 | Triage

Analysis

max time kernel
140s
max time network
69s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 19:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0120552719e2054bf58fe1513912ba3b.exe
Size

545KB
MD5

0120552719e2054bf58fe1513912ba3b
SHA1

b8d5e899ccb8e1de48a97bbc7a93edd2015720ff
SHA256

e39c30a6feb9d9e4abc1e6050e11324c82bc136b85672062a0ff27a69502d8a0
SHA512

ec6c9c6198f5dcb1b54aa2aeafdf717497725e084754447203f3657483a1acc0776cb482ab1e4fb72e08f95e6b2a1460559ce63e21a9501388b007efcec794d5
SSDEEP

12288:ZJ8gvgTiFVyK8qdF1TfRAV4koMMyLy/yKZe/:ZpFpdF1T2V4nMMyLy/Q

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1020	4328	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\0120552719e2054bf58fe1513912ba3b.exe
"C:\Users\Admin\AppData\Local\Temp\0120552719e2054bf58fe1513912ba3b.exe"
1⤵
PID:4328
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 524
  2⤵
  - Program crash
  PID:1020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4328 -ip 4328
1⤵
PID:1124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads