bed74ef3a37675dabe2676b4e24a3ee5eb31d665c8361dd2ab1155386dbd4246 | Triage

Analysis

max time kernel
146s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 05:32

Sharing

Report Analysis Logs

General

Target

2a226d17c2b43014046e979a9f34a571.exe
Size

4KB
MD5

2a226d17c2b43014046e979a9f34a571
SHA1

7f5482d624d054ab705acb5daeba3522c212ef63
SHA256

bed74ef3a37675dabe2676b4e24a3ee5eb31d665c8361dd2ab1155386dbd4246
SHA512

480b813d63ba11b348e3f8f5a8f80219e5927fa6d3a6d2889d7be633c9300147ea7251efe86c6c6a03b1e107290e4a04b74fda59d7287f119ada3e7eafcd3ab4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
668	5004	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\2a226d17c2b43014046e979a9f34a571.exe
"C:\Users\Admin\AppData\Local\Temp\2a226d17c2b43014046e979a9f34a571.exe"
1⤵
PID:5004
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 816
  2⤵
  - Program crash
  PID:668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5004 -ip 5004
1⤵
PID:3192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5004-1-0x0000000074B80000-0x0000000075330000-memory.dmp

Filesize
7.7MB

Download
memory/5004-0-0x0000000000840000-0x0000000000848000-memory.dmp

Filesize
32KB

Download
memory/5004-2-0x0000000074B80000-0x0000000075330000-memory.dmp

Filesize
7.7MB

Download