45a52b77b5a3f48b0981ddf23c99ca6c3162f351290a10e0a4853d01d48e5e0d | Triage

Analysis

max time kernel
142s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 13:30

Sharing

Report Analysis Logs

General

Target

1a15794535503cd1ec60d05133806e19.exe
Size

299KB
MD5

1a15794535503cd1ec60d05133806e19
SHA1

1aedbc0f29cc8d952ed38f4f2d770b99a4d41415
SHA256

45a52b77b5a3f48b0981ddf23c99ca6c3162f351290a10e0a4853d01d48e5e0d
SHA512

7c2b427dcabab64c33500522bbb1917ec9072cd80667d7260b1288d6c7334acc6de1d195c7cabf6dcc70f7d406eb8c08eb39e14282189b1dcddfb2b568bffbd8
SSDEEP

6144:XAYEC5+tSkUGr4EnbSetLTs7TOd3o3PuoDtrlo+O:VE0+Ikh92etZE3r

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4104	1632	WerFault.exe	16

C:\Users\Admin\AppData\Local\Temp\1a15794535503cd1ec60d05133806e19.exe
"C:\Users\Admin\AppData\Local\Temp\1a15794535503cd1ec60d05133806e19.exe"
1⤵
PID:1632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1632 -s 488
  2⤵
  - Program crash
  PID:4104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1632 -ip 1632
1⤵
PID:2608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads