52d569e93417117d4fe8c2e5013c9700cf31ef184901f6f3702703dc4645704e | Triage

Analysis

max time kernel
150s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 19:40

Sharing

Report Analysis Logs

General

Target

516ec1055ffe241f7066d4fa570bd162.exe
Size

37KB
MD5

516ec1055ffe241f7066d4fa570bd162
SHA1

9b7e480e1178b9a7ccd73919597c2fb2cc7e2655
SHA256

52d569e93417117d4fe8c2e5013c9700cf31ef184901f6f3702703dc4645704e
SHA512

67e8c6ab154a00a0dd27fe4713ff2622c7ace95de1661111d578221c356756d6c56080e56b7781e5c025379347340431d9b8facf294dd259b85042eeb74311fd
SSDEEP

768:q7iQmoFDbpeGF0bhMyE56ZBGoeH+ZvZ+mOG:+iQxeGFOBGoeSv3P

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4976	5092	WerFault.exe	55
1012	5092	WerFault.exe	55

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5092 wrote to memory of 4976	5092	516ec1055ffe241f7066d4fa570bd162.exe	96
PID 5092 wrote to memory of 4976	5092	516ec1055ffe241f7066d4fa570bd162.exe	96
PID 5092 wrote to memory of 4976	5092	516ec1055ffe241f7066d4fa570bd162.exe	96

C:\Users\Admin\AppData\Local\Temp\516ec1055ffe241f7066d4fa570bd162.exe
"C:\Users\Admin\AppData\Local\Temp\516ec1055ffe241f7066d4fa570bd162.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 380
  2⤵
  - Program crash
  PID:4976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 380
  2⤵
  - Program crash
  PID:1012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5092 -ip 5092
1⤵
PID:3700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5092-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/5092-1-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download