1cbeddc37b6929dbe51264a64c0cd5e2654e61bd403dcf4286d3a8f2d230f796 | Triage

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

186fb83395ed266debc273bcb1cb7e10.exe
Size

24KB
MD5

186fb83395ed266debc273bcb1cb7e10
SHA1

399aba4cfd7988695d92ecfd17f4f51194f6c12a
SHA256

1cbeddc37b6929dbe51264a64c0cd5e2654e61bd403dcf4286d3a8f2d230f796
SHA512

f930c190f3a701df23c1518f633b20bb674da9cf98b049cec41683e6ae155f63614294006d2bd2df48b740d88ca8057708b43c0a3fdf5843df47ae012b973879
SSDEEP

768:SFUph+3TdnrFrig/gzlH5X3yIBCt0i30GSDRY:oXrczCIAt0c0Gb

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\nwowpok.sys	186fb83395ed266debc273bcb1cb7e10.exe
File created	C:\Windows\SysWOW64\SysWoWa8.dll	186fb83395ed266debc273bcb1cb7e10.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4144	816	WerFault.exe	64

C:\Users\Admin\AppData\Local\Temp\186fb83395ed266debc273bcb1cb7e10.exe
"C:\Users\Admin\AppData\Local\Temp\186fb83395ed266debc273bcb1cb7e10.exe"
1⤵
- Drops file in System32 directory
PID:816
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 816 -s 336
  2⤵
  - Program crash
  PID:4144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 816 -ip 816
1⤵
PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads