4070403af8c89abe0d3416b9bcb713bffcbc263d1676f39fdd3566560ff1278e | Triage

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 00:15

Sharing

Report Analysis Logs

General

Target

0834747a838a1b16b211e8bc12b40088.exe
Size

33KB
MD5

0834747a838a1b16b211e8bc12b40088
SHA1

8491c33a473772881c2011517cfd27c5ef963b1c
SHA256

4070403af8c89abe0d3416b9bcb713bffcbc263d1676f39fdd3566560ff1278e
SHA512

8ef7b90da400995c524f9f90765af60b3cc60aee0f30585407c33d667d4f6131fcfb5a0ab96d140a62cd598b91d8efc9e63a81f7486b38abf2f06a953da8bdb7
SSDEEP

768:F81WC+PSle2YaBIEueKWYLBo9rXlWcgLTNpnD4QjeBp:2TepO5eLCz4nDHSB

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4876	1460	WerFault.exe	88
2404	1460	WerFault.exe	88

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1460 wrote to memory of 4876	1460	0834747a838a1b16b211e8bc12b40088.exe	93
PID 1460 wrote to memory of 4876	1460	0834747a838a1b16b211e8bc12b40088.exe	93
PID 1460 wrote to memory of 4876	1460	0834747a838a1b16b211e8bc12b40088.exe	93

C:\Users\Admin\AppData\Local\Temp\0834747a838a1b16b211e8bc12b40088.exe
"C:\Users\Admin\AppData\Local\Temp\0834747a838a1b16b211e8bc12b40088.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1460
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1460 -s 272
  2⤵
  - Program crash
  PID:4876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1460 -s 272
  2⤵
  - Program crash
  PID:2404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1460 -ip 1460
1⤵
PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1460-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1460-1-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download