f9b49cb26549c169da79867fc03c4fb3fe96f85fce8b9296d7ea25e7f4f23be2 | Triage

Analysis

max time kernel
138s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31-12-2023 07:19

Sharing

Report Analysis Logs

General

Target

2d20953256a0f6bb5a4d5afff5cac5b4.exe
Size

58KB
MD5

2d20953256a0f6bb5a4d5afff5cac5b4
SHA1

46944214dabe41fa4208dc22eef60440b5478623
SHA256

f9b49cb26549c169da79867fc03c4fb3fe96f85fce8b9296d7ea25e7f4f23be2
SHA512

151350034fb1385babff39847c91099385db4fe06f4c14be9e275cd83ca8ebb33e38604529f8ae63631731e83beda092fa8553dcada1d1a71624f65d4f46c1ce
SSDEEP

1536:AnJSbbK8CInNpeEdljm98AkcVOzpovSSY:KADpDljm9PVFZY

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3880	4772	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\2d20953256a0f6bb5a4d5afff5cac5b4.exe
"C:\Users\Admin\AppData\Local\Temp\2d20953256a0f6bb5a4d5afff5cac5b4.exe"
1⤵
PID:4772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4772 -s 224
  2⤵
  - Program crash
  PID:3880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4772 -ip 4772
1⤵
PID:4344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4772-0-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/4772-1-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download