4bc16c7de6acdb60e0213533ddd7bd63f297c294c4cde3d47b22860b590c1baf | Triage

Analysis

max time kernel
139s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 01:42

Sharing

Report Analysis Logs

General

Target

0a732426a330d8d56b385a0e33c949ed.exe
Size

116KB
MD5

0a732426a330d8d56b385a0e33c949ed
SHA1

f3d37697174d0df38364d233bffbb739e2138ef7
SHA256

4bc16c7de6acdb60e0213533ddd7bd63f297c294c4cde3d47b22860b590c1baf
SHA512

7798fb5e601720c8f65321c16796dfb1db5109897c8b3ab8fdf193d2944a3c47268661db8fa20ef0f9e2abb3342198f08471f5fe37b64499a437961c2acf0abb
SSDEEP

3072:0Ju0+KCCZEsG07ubWpsVDQqzIXay6Gjc4GeW:040BV2sG/bWOV0raybjzGeW

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2368	4424	WerFault.exe	87
5088	4424	WerFault.exe	87

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4424 wrote to memory of 2368	4424	0a732426a330d8d56b385a0e33c949ed.exe	92
PID 4424 wrote to memory of 2368	4424	0a732426a330d8d56b385a0e33c949ed.exe	92
PID 4424 wrote to memory of 2368	4424	0a732426a330d8d56b385a0e33c949ed.exe	92

C:\Users\Admin\AppData\Local\Temp\0a732426a330d8d56b385a0e33c949ed.exe
"C:\Users\Admin\AppData\Local\Temp\0a732426a330d8d56b385a0e33c949ed.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 224
  2⤵
  - Program crash
  PID:2368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 224
  2⤵
  - Program crash
  PID:5088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4424 -ip 4424
1⤵
PID:3800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4424-0-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download
memory/4424-1-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download