128a294b3406923243908fde6a52805822c154d926bfc50d567296158beecf94 | Triage

Analysis

max time kernel
130s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/01/2024, 20:45

Sharing

Report Analysis Logs

General

Target

7df492c3b7d18636d8447d5ee932401e.exe
Size

793KB
MD5

7df492c3b7d18636d8447d5ee932401e
SHA1

4eb0865fee8cb02b6212cb18b04d31fc75280a33
SHA256

128a294b3406923243908fde6a52805822c154d926bfc50d567296158beecf94
SHA512

add80629d8dfb578f7785af1970e96d56397c4eccbf0fcb8778014d940f9ca5b0202ee2610c1aeb7df4b4578bb974b3d71ccfd69aa37886b4c7136e46e9692c1
SSDEEP

24576:gINiGDVZJ1tF23yU+yDpydZ1nSrsb3+g58NT1:gS/3HU+yDpYSHga5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2680	1884	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\7df492c3b7d18636d8447d5ee932401e.exe
"C:\Users\Admin\AppData\Local\Temp\7df492c3b7d18636d8447d5ee932401e.exe"
1⤵
PID:1884
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 484
  2⤵
  - Program crash
  PID:2680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1884 -ip 1884
1⤵
PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1884-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1884-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1884-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download