aefc80a97edd767cd529a2630833a3641c20135a84c5ef9da4fa9c3cf9231eb1 | Triage

Analysis

max time kernel
138s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18-01-2024 03:53

Sharing

Report Analysis Logs

General

Target

64658470a78f8c8fc907c8fdd77aac76.exe
Size

135KB
MD5

64658470a78f8c8fc907c8fdd77aac76
SHA1

2b5436f7b4f21b2ae82b3a101a5302ccd51b1d26
SHA256

aefc80a97edd767cd529a2630833a3641c20135a84c5ef9da4fa9c3cf9231eb1
SHA512

c5079452dc47271af9825953570e8143f5f609fd22c3b4ceca6c341fd57536985ba5473368e6b36b05f2084998a61f6879f372d6ff0d7d537dfc41b1193c4f1e
SSDEEP

3072:kK8NWNW5nzjaZe0hjmktokGLHMPum31/D/:CL9jcHmkmBj6uS9T

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2248	4872	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\64658470a78f8c8fc907c8fdd77aac76.exe
"C:\Users\Admin\AppData\Local\Temp\64658470a78f8c8fc907c8fdd77aac76.exe"
1⤵
PID:4872
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 228
  2⤵
  - Program crash
  PID:2248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4872 -ip 4872
1⤵
PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4872-0-0x0000000000520000-0x0000000000541E00-memory.dmp

Filesize
135KB

Download
memory/4872-1-0x0000000000520000-0x0000000000541E00-memory.dmp

Filesize
135KB

Download