cb51b3a6f240eaa1e464fc55c5a5f625cddf78d75447198056b506826213045d | Triage

Analysis

max time kernel
141s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 14:25

Sharing

Report Analysis Logs

General

Target

1b592a0a646df8c1cfa2d0d0dd4c9209.exe
Size

133KB
MD5

1b592a0a646df8c1cfa2d0d0dd4c9209
SHA1

5374c398be4a6a263c58dacdf821d4a3a7b9f711
SHA256

cb51b3a6f240eaa1e464fc55c5a5f625cddf78d75447198056b506826213045d
SHA512

4847c02c61afa02addd56a162fc3e9700b11aa06b32047f8b0025e1f27261ed0bda3f4f170e7540d6dca0237f80ffa77e618bf9dc9a2019172e1d3b317099acf
SSDEEP

3072:rHnsfvIHQ0BvzboA34LFO+Jc2/zsCy9CQ:rns3IrtPIxFIXN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5076	5000	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\1b592a0a646df8c1cfa2d0d0dd4c9209.exe
"C:\Users\Admin\AppData\Local\Temp\1b592a0a646df8c1cfa2d0d0dd4c9209.exe"
1⤵
PID:5000
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5000 -s 224
  2⤵
  - Program crash
  PID:5076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5000 -ip 5000
1⤵
PID:3924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5000-0-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download
memory/5000-1-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download