fd9301dd79a211e0ce63d3d49a27116d2282f9409914df37ebac61d58cea619a | Triage

Analysis

max time kernel
145s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:55

Sharing

Report Analysis Logs

General

Target

0d9b0d8b1dac1de86aeea3801d4a7691.exe
Size

132KB
MD5

0d9b0d8b1dac1de86aeea3801d4a7691
SHA1

515e9024a8d8872200d171ecb849acbed5ce848d
SHA256

fd9301dd79a211e0ce63d3d49a27116d2282f9409914df37ebac61d58cea619a
SHA512

1320dba8481b996f187dd2e22663adc86741e950a3af6e76de2851a5a5d831ad8ab80a0d74f8edd6fbb2fc0bcb19cc72552999be4e2ad923707067242075f6b1
SSDEEP

3072:V9t3VIKHzRv19l0q3KRkfEHL4iJW+6yKd8c:VH3igzr9l0q3KrLRJW+69y

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3480	5100	WerFault.exe	15

C:\Users\Admin\AppData\Local\Temp\0d9b0d8b1dac1de86aeea3801d4a7691.exe
"C:\Users\Admin\AppData\Local\Temp\0d9b0d8b1dac1de86aeea3801d4a7691.exe"
1⤵
PID:5100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 224
  2⤵
  - Program crash
  PID:3480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 5100 -ip 5100
1⤵
PID:4068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5100-0-0x0000000000400000-0x0000000000452000-memory.dmp

Filesize
328KB

Download