2f3a85e6b94e0dcf35a317d0b3864dcad96c0ee4225a61018d6508a9ae5b14a9 | Triage

Analysis

max time kernel
148s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 21:58

Sharing

Report Analysis Logs

General

Target

1dd17797cb8ab9fee627ebbeae274987.exe
Size

75KB
MD5

1dd17797cb8ab9fee627ebbeae274987
SHA1

57fcad61bc937fb38053cbb14a694f0ecd0c5953
SHA256

2f3a85e6b94e0dcf35a317d0b3864dcad96c0ee4225a61018d6508a9ae5b14a9
SHA512

c52f179273e03592a82a966145b31401e7031d54eb71f4f99063490b5c3b1047731379aae6b6e9f527ab060460f44dfe7b82841a65fa9219390d2a7a26ee69a2
SSDEEP

1536:m5O/FmpLDxTIVneN38sViLxHrwWvyLsGJpxit8Jj:m5uFALDxknedAxsWqLvRJj

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4328	2972	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1dd17797cb8ab9fee627ebbeae274987.exe
"C:\Users\Admin\AppData\Local\Temp\1dd17797cb8ab9fee627ebbeae274987.exe"
1⤵
PID:2972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 292
  2⤵
  - Program crash
  PID:4328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2972 -ip 2972
1⤵
PID:4380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2972-0-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/2972-1-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download