848c37011d8ac421cbcf6ece9062afc98de01aea15261e04f183be92d8bb02d3 | Triage

Analysis

max time kernel
136s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 20:48

Sharing

Report Analysis Logs

General

Target

1c2a31b2e4e9f51c8dd2373e355cce24.exe
Size

41KB
MD5

1c2a31b2e4e9f51c8dd2373e355cce24
SHA1

53eb9d271b07e3e30e1f12b23d51f58495157fe8
SHA256

848c37011d8ac421cbcf6ece9062afc98de01aea15261e04f183be92d8bb02d3
SHA512

d27ec29065f0c94e1ddbf9ae682e23fc70c78397fadda495a761e053e91892674979d6d5b8b09328cf612129faf2a345281b7be6804c15e36791c39736069bb5
SSDEEP

768:X42NQkzXmVtr5vF0bpsHllEVfx9ukujk4kil3HOd:B6kzXmVV5vCb+Hlm5Flfd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4920	1844	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\1c2a31b2e4e9f51c8dd2373e355cce24.exe
"C:\Users\Admin\AppData\Local\Temp\1c2a31b2e4e9f51c8dd2373e355cce24.exe"
1⤵
PID:1844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1844 -s 484
  2⤵
  - Program crash
  PID:4920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1844 -ip 1844
1⤵
PID:408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1844-0-0x0000000013140000-0x000000001317A000-memory.dmp

Filesize
232KB

Download
memory/1844-1-0x0000000013140000-0x000000001317A000-memory.dmp

Filesize
232KB

Download