f05991cc41754a9a3e7862d066a1bee0fba9a70bb8b17a866dcf6acc997bc8c8 | Triage

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 12:36

Sharing

Report Analysis Logs

General

Target

18b88d6f1b8fa7904237d379adea6519.exe
Size

157KB
MD5

18b88d6f1b8fa7904237d379adea6519
SHA1

dda7d80af4835c4bf4940ed08ba3abd6a6b8e2cb
SHA256

f05991cc41754a9a3e7862d066a1bee0fba9a70bb8b17a866dcf6acc997bc8c8
SHA512

54a7d3af0ca44362724508de4ceb2137c914d4d8060aef21da93f14199a39a60305a0e3d429c7c501b92f9a625e14e24d378abb453a4f66fc1fdd8b4052fb4ca
SSDEEP

3072:Br6W2wIcju6IIXlNPQmTh907Y6lP/8qkrHKY:J6gI4u6lXnxh65QV

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2828	772	WerFault.exe	20
4952	772	WerFault.exe	20

C:\Users\Admin\AppData\Local\Temp\18b88d6f1b8fa7904237d379adea6519.exe
"C:\Users\Admin\AppData\Local\Temp\18b88d6f1b8fa7904237d379adea6519.exe"
1⤵
PID:772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 772 -s 480
  2⤵
  - Program crash
  PID:2828
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 772 -s 484
  2⤵
  - Program crash
  PID:4952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 772 -ip 772
1⤵
PID:3872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 772 -ip 772
1⤵
PID:5016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/772-0-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download
memory/772-1-0x0000000000400000-0x0000000000442000-memory.dmp

Filesize
264KB

Download