6d57bc6466fa3de4ffea4df767ac8b53bb1bd1e6e83869a04dfb2580b7c90937 | Triage

Analysis

max time kernel
144s
max time network
68s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 20:25

Sharing

Report Analysis Logs

General

Target

1bcfd0e1899ec9da1d123f5570a1608c.exe
Size

48KB
MD5

1bcfd0e1899ec9da1d123f5570a1608c
SHA1

afbe2d037b1bb2cfb3345cd1c5b51e06e578098d
SHA256

6d57bc6466fa3de4ffea4df767ac8b53bb1bd1e6e83869a04dfb2580b7c90937
SHA512

fb6426dfff96412989d5e9eb296b76562ad959d494f775a532459b2881c0a96b8282e9108f78588ad4b25b87b426a2bec0cce383f70a7fac9d685f80382f9a03
SSDEEP

768:rar1799OkDluihXyZ00FktJ/ULcAEcg9yiR+v:rar1bOFjZAfMLn1iU

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4928	4088	WerFault.exe	16

C:\Users\Admin\AppData\Local\Temp\1bcfd0e1899ec9da1d123f5570a1608c.exe
"C:\Users\Admin\AppData\Local\Temp\1bcfd0e1899ec9da1d123f5570a1608c.exe"
1⤵
PID:4088
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 232
  2⤵
  - Program crash
  PID:4928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4088 -ip 4088
1⤵
PID:1224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads