de1553913373e2d5999cbf775f3d507477a8dac5b6a0a9595d5190725f4bed87 | Triage

Analysis

max time kernel
148s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2024 14:34

Sharing

Report Analysis Logs

General

Target

4e8e8663f1dc94babc83717713586acb.exe
Size

8KB
MD5

4e8e8663f1dc94babc83717713586acb
SHA1

f7620ca247ba656a1bfe3dc6a23d3740d46f0306
SHA256

de1553913373e2d5999cbf775f3d507477a8dac5b6a0a9595d5190725f4bed87
SHA512

4d8876243c31a6d276de64831d9870b1f7331a54d864f748977a3d286142e711d18ef7862e0946d626ca91ba2766786103b33d7c77d21191c24e510f80f8befa
SSDEEP

192:hx1xqSeL9U0IGY1X+GI/GIW1inaiSX5RlBf:h3IS49UrGKXc/JnaiSXL

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
492	4324	WerFault.exe	15

C:\Users\Admin\AppData\Local\Temp\4e8e8663f1dc94babc83717713586acb.exe
"C:\Users\Admin\AppData\Local\Temp\4e8e8663f1dc94babc83717713586acb.exe"
1⤵
PID:4324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 820
  2⤵
  - Program crash
  PID:492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4324 -ip 4324
1⤵
PID:3116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4324-2-0x00000000054C0000-0x000000000555C000-memory.dmp

Filesize
624KB

Download
memory/4324-1-0x0000000074880000-0x0000000075030000-memory.dmp

Filesize
7.7MB

Download
memory/4324-0-0x0000000000C70000-0x0000000000C78000-memory.dmp

Filesize
32KB

Download
memory/4324-3-0x0000000074880000-0x0000000075030000-memory.dmp

Filesize
7.7MB

Download