600de0d6adb5dda080a4a6cb2b8860d5f104fc628b9a3e34b85d3e844b15f8e4 | Triage

Analysis

max time kernel
144s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/01/2024, 09:07

Sharing

Report Analysis Logs

General

Target

673b038fe6b21d1d4e69029e6837037f.exe
Size

448KB
MD5

673b038fe6b21d1d4e69029e6837037f
SHA1

818b11ba12f8ea007a2d740b44ed09db8ea539d7
SHA256

600de0d6adb5dda080a4a6cb2b8860d5f104fc628b9a3e34b85d3e844b15f8e4
SHA512

4a8f4af37f97349fe524afabdd7e0598b25ab72f97e4b190474a211e069da23536a27fd4a27d4fb01c86cc7217b578383d6f6556b4037cc9461df908c4384fc3
SSDEEP

12288:ilQRH00qY1mOKouCzFMHVui7gBcszKAANbGV:pHyY1mhr7QcsZCb0

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1268	2984	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\673b038fe6b21d1d4e69029e6837037f.exe
"C:\Users\Admin\AppData\Local\Temp\673b038fe6b21d1d4e69029e6837037f.exe"
1⤵
PID:2984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 420
  2⤵
  - Program crash
  PID:1268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 2984 -ip 2984
1⤵
PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads