89c1dfd5ee6fe5faa9ecb24edf44ec559450b88a32447f35f2c0218d1ab7e21b | Triage

Analysis

max time kernel
158s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31-12-2023 04:02

Sharing

Report Analysis Logs

General

Target

27595bea0b9b2b6f21cf7d6b4ee33eb0.exe
Size

227KB
MD5

27595bea0b9b2b6f21cf7d6b4ee33eb0
SHA1

a35cfcb22f7c3b0ece65d14fe52bc8f62592a339
SHA256

89c1dfd5ee6fe5faa9ecb24edf44ec559450b88a32447f35f2c0218d1ab7e21b
SHA512

3ab835c3332429dc4790b5cf91b7bb372daada0a553780305efc12d1ac42f4774e6bc542b2ddbf1517341bf356632e04672ff73396800eaf4a2ad491778c41f8
SSDEEP

6144:/+ZqED8o6hYAunn1tWcq6cPAB/ouSZeu9ffz:UFYoT9n1QcqD4ge2

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3804	1552	WerFault.exe	89
4464	1552	WerFault.exe	89

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1552 wrote to memory of 3804	1552	27595bea0b9b2b6f21cf7d6b4ee33eb0.exe	97
PID 1552 wrote to memory of 3804	1552	27595bea0b9b2b6f21cf7d6b4ee33eb0.exe	97
PID 1552 wrote to memory of 3804	1552	27595bea0b9b2b6f21cf7d6b4ee33eb0.exe	97

C:\Users\Admin\AppData\Local\Temp\27595bea0b9b2b6f21cf7d6b4ee33eb0.exe
"C:\Users\Admin\AppData\Local\Temp\27595bea0b9b2b6f21cf7d6b4ee33eb0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1552
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1552 -s 476
  2⤵
  - Program crash
  PID:3804
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1552 -s 476
  2⤵
  - Program crash
  PID:4464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1552 -ip 1552
1⤵
PID:4284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1552-3-0x0000000000790000-0x0000000000890000-memory.dmp

Filesize
1024KB

Download
memory/1552-4-0x0000000000790000-0x0000000000890000-memory.dmp

Filesize
1024KB

Download