1a07e07b5008a083dafcb06b438a08d7f99bf67342fd5b29b2861f9f5667b8a1 | Triage

Analysis

max time kernel
139s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 08:36

Sharing

Report Analysis Logs

General

Target

138c8837f33442f0d57b0d8e726bf31a.exe
Size

27KB
MD5

138c8837f33442f0d57b0d8e726bf31a
SHA1

85a002adae1a45c84b15148ff726f29fe60b7cc1
SHA256

1a07e07b5008a083dafcb06b438a08d7f99bf67342fd5b29b2861f9f5667b8a1
SHA512

8f3d965f489a74b005d63a85d4de9f924d9353b178aa4f4a5ce801e4ce28ed8d2ccb21c9dc82fa773f9df356972b698800801962a8b0ccd9e857f478053b759d
SSDEEP

768:ldvvsVusjfd+fqafk0CXdwgUqyRfb7+5N4Gvdux+ha5:ldkV+fqashwC8b7+5N3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4908	1608	WerFault.exe	49

C:\Users\Admin\AppData\Local\Temp\138c8837f33442f0d57b0d8e726bf31a.exe
"C:\Users\Admin\AppData\Local\Temp\138c8837f33442f0d57b0d8e726bf31a.exe"
1⤵
PID:1608
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1608 -s 220
  2⤵
  - Program crash
  PID:4908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1608 -ip 1608
1⤵
PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1608-0-0x0000000013140000-0x0000000013182000-memory.dmp

Filesize
264KB

Download
memory/1608-1-0x0000000013140000-0x0000000013182000-memory.dmp

Filesize
264KB

Download