a7ad2937f9fe9e22b397c552a1a3bd6c5ec28e394993cbf1143cc850f33a94a7 | Triage

Analysis

max time kernel
131s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2024 02:36

Sharing

Report Analysis Logs

General

Target

6944814fdcdc6b051bef078ee0371f9c.exe
Size

268KB
MD5

6944814fdcdc6b051bef078ee0371f9c
SHA1

fbe3489af259a7ef322ab8675ae7081a45ee6ab3
SHA256

a7ad2937f9fe9e22b397c552a1a3bd6c5ec28e394993cbf1143cc850f33a94a7
SHA512

b34e128be2eb7232def3028825b53761b9972b007e061c590f0a2948505b179706442f9e7060fdfa7040420a08ba8c76b736a73befc65f24b22bcf0fd79d3b2a
SSDEEP

6144:Pu8+K+v/XZRCWKWrJTKc9VBHCRtkzFtUmq:Pu8+hXZs9WocpiDws

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3520 1500 WerFault.exe 6944814fdcdc6b051bef078ee0371f9c.exe

C:\Users\Admin\AppData\Local\Temp\6944814fdcdc6b051bef078ee0371f9c.exe
"C:\Users\Admin\AppData\Local\Temp\6944814fdcdc6b051bef078ee0371f9c.exe"
1⤵
PID:1500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 232
2⤵
- Program crash
PID:3520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1500 -ip 1500
1⤵
PID:4932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...