12df2d85fc7723dd87c3a2d4a292f5fd91b86d5587b39f40c20ba392f6208b3e | Triage

Analysis

max time kernel
138s
max time network
15s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 02:46

Sharing

Report Analysis Logs

General

Target

4512633b830ad91b09046dd633e12864.exe
Size

424KB
MD5

4512633b830ad91b09046dd633e12864
SHA1

203779f3c87b9610270bf3e29af7ca4fd3ea541f
SHA256

12df2d85fc7723dd87c3a2d4a292f5fd91b86d5587b39f40c20ba392f6208b3e
SHA512

d63d0d4e37dc26b6f3a157a0be0345911759c63e47094341ca2d6f34732d4c23536bae7729e019dad5d2d2548a26b84c0ed899c8214f2b9cf4f4886870853ef5
SSDEEP

12288:soH/ZVezlmi3lHbuad+sp/1K9wb+Ha02MB9:tH/Zqlmi9bxdrp9o6Oh2Y

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2348	2972	WerFault.exe	12

C:\Users\Admin\AppData\Local\Temp\4512633b830ad91b09046dd633e12864.exe
"C:\Users\Admin\AppData\Local\Temp\4512633b830ad91b09046dd633e12864.exe"
1⤵
PID:2972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 520
  2⤵
  - Program crash
  PID:2348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2972 -ip 2972
1⤵
PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2972-1-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/2972-0-0x00000000005A0000-0x00000000005A6000-memory.dmp

Filesize
24KB

Download