983e17b50b5cdc0898df28f9928b910e6c95bafc3cbd781d573bf91dfc018da3 | Triage

Analysis

max time kernel
159s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 07:17

Sharing

Report Analysis Logs

General

Target

11eb0f51eb111d6e0e17af7e035c7f4b.exe
Size

799KB
MD5

11eb0f51eb111d6e0e17af7e035c7f4b
SHA1

e30704ce865bea92b98ce154068ba049ae46e850
SHA256

983e17b50b5cdc0898df28f9928b910e6c95bafc3cbd781d573bf91dfc018da3
SHA512

35bfa33d5ed5c532dafe1748a823aae01d3dc049c99143669cfda38eb3f1193fc7c42bae36e559fb614e2d2fd3e1b2a2637aa1dd2d263364c887b3646a8742fd
SSDEEP

24576:KRBLCGPJ17Epkepi6uCTv0g9Eb58zBxO28NT:KTuGPHEpVpZFVEb+XOL

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3080	4672	WerFault.exe	18

C:\Users\Admin\AppData\Local\Temp\11eb0f51eb111d6e0e17af7e035c7f4b.exe
"C:\Users\Admin\AppData\Local\Temp\11eb0f51eb111d6e0e17af7e035c7f4b.exe"
1⤵
PID:4672
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4672 -s 488
  2⤵
  - Program crash
  PID:3080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4672 -ip 4672
1⤵
PID:4028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4672-2-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4672-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/4672-5-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download