237ec0c531ea14cc6db2dc5ab42e9eb2aa32bf2ac4f4242127aabaef31c55d63 | Triage

Analysis

max time kernel
145s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
05-01-2024 23:43

Sharing

Report Analysis Logs

General

Target

44bacc5e9c35ade2da2f36ec1d6347e7.exe
Size

440KB
MD5

44bacc5e9c35ade2da2f36ec1d6347e7
SHA1

6cac80cefee051647a1692fd81c940f3b93f467d
SHA256

237ec0c531ea14cc6db2dc5ab42e9eb2aa32bf2ac4f4242127aabaef31c55d63
SHA512

8a5c22306d0a99a03d4e4095bf08d0c19ffde25c921843e61ab7d449ac9b848e528afe8e639909433e3fd4cd6850fe256498aa73b77f5609b1ef618b2e57f8d2
SSDEEP

3072:kzqTC/VXu6wXe0Nc8QsCPgGvKe94sSJN:AqGdXu6wO0Nc8QsGgGie9S

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2804	464	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\44bacc5e9c35ade2da2f36ec1d6347e7.exe
"C:\Users\Admin\AppData\Local\Temp\44bacc5e9c35ade2da2f36ec1d6347e7.exe"
1⤵
PID:464
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 464 -s 268
  2⤵
  - Program crash
  PID:2804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 464 -ip 464
1⤵
PID:4848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/464-0-0x0000000000400000-0x0000000000472AE0-memory.dmp

Filesize
458KB

Download
memory/464-1-0x0000000000400000-0x0000000000472AE0-memory.dmp

Filesize
458KB

Download