9eef4b509dc289176872c9eed2cb64e2110c05db5164bd1b73018734ddb53ed9 | Triage

Analysis

max time kernel
139s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2024, 02:04

Sharing

Report Analysis Logs

General

Target

3b9cd79fe251dc2ef1604c1b2a19902f.exe
Size

80KB
MD5

3b9cd79fe251dc2ef1604c1b2a19902f
SHA1

73678d7d6b5f5ce64f706e61dfed9b0bc1ea7616
SHA256

9eef4b509dc289176872c9eed2cb64e2110c05db5164bd1b73018734ddb53ed9
SHA512

e24aa7445bd69ec1f8da1d8f32542554a094d07ad8c664a5a208548c989ec385682ab4722e05e47f657a0939ae0ada5d155b8edbbf821ce3a1115daa8df5e944
SSDEEP

1536:zU7jYwQj0MKyTUO2DjpQkUt5Ekr4R54si5yTIVsO6v:MYZ16JQoksXm5yTOx6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1672	1872	WerFault.exe	16

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1872 -ip 1872
1⤵
PID:1912

C:\Users\Admin\AppData\Local\Temp\3b9cd79fe251dc2ef1604c1b2a19902f.exe
"C:\Users\Admin\AppData\Local\Temp\3b9cd79fe251dc2ef1604c1b2a19902f.exe"
1⤵
PID:1872
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1872 -s 268
  2⤵
  - Program crash
  PID:1672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1872-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/1872-1-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download