e2a6b08efc9f25b06dd215b9a9a23c193cbbd2a071e29a606e83943cc94395e1 | Triage

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/01/2024, 23:53

Sharing

Report Analysis Logs

General

Target

423ca6b964ed2a6dcdc0f7d874e9ad7a.exe
Size

5KB
MD5

423ca6b964ed2a6dcdc0f7d874e9ad7a
SHA1

b5c4ebc5ffa783330f582846f4b7155225d68511
SHA256

e2a6b08efc9f25b06dd215b9a9a23c193cbbd2a071e29a606e83943cc94395e1
SHA512

7fc7a0a78ecd70d876b94e163cdd2141b932e2f019490d452675bcf735b3cfe86d2600ddc1ebc76db83fbb213c27433298382e7bc51bc532f261715b759dd7ff
SSDEEP

96:4E/kuoaF61zr/gPPrmgZZnY24UO9R3UYtsJNOZXBXCH:4E/kpaFw/oHYR3UYtRXBSH

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2220	4724	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\423ca6b964ed2a6dcdc0f7d874e9ad7a.exe
"C:\Users\Admin\AppData\Local\Temp\423ca6b964ed2a6dcdc0f7d874e9ad7a.exe"
1⤵
PID:4724
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 264
  2⤵
  - Program crash
  PID:2220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4724 -ip 4724
1⤵
PID:1240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4724-0-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/4724-1-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download