114dac3813e82e4fb5b1b3eb5efc594c9b0d3aa92c3f738a611f5fe091d4762a | Triage

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 05:10

Sharing

Report Analysis Logs

General

Target

529dc695bcc4c984651cc59264e6bb21.exe
Size

702KB
MD5

529dc695bcc4c984651cc59264e6bb21
SHA1

d055249d0cde8a6be3a9eb7edcb3e06869a3a766
SHA256

114dac3813e82e4fb5b1b3eb5efc594c9b0d3aa92c3f738a611f5fe091d4762a
SHA512

94d881bae40695239c06ebecf03b6a9f36b42eca818ae3be9b88ad64de195bb494cc2136d8743f3d8aebb287ccd634e01bf1d328076451b7de1ad16b1992cb08
SSDEEP

12288:cGhSbW+XPBAuxlVtD751epSaGGGGGGGpVcr:baHXPBAuxlVtD11eGcr

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4696	1828	WerFault.exe	15

C:\Users\Admin\AppData\Local\Temp\529dc695bcc4c984651cc59264e6bb21.exe
"C:\Users\Admin\AppData\Local\Temp\529dc695bcc4c984651cc59264e6bb21.exe"
1⤵
PID:1828
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1828 -s 552
  2⤵
  - Program crash
  PID:4696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1828 -ip 1828
1⤵
PID:4244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1828-0-0x0000000000400000-0x00000000004B6000-memory.dmp

Filesize
728KB

Download
memory/1828-1-0x0000000000400000-0x00000000004B6000-memory.dmp

Filesize
728KB

Download