570af53d8319af5b0a312af11ffb25b3b57a49c777396bb879bb08088f9ae6fa | Triage

Analysis

max time kernel
142s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/02/2024, 03:59

Sharing

Report Analysis Logs

General

Target

85de2f8baef28843b4810831ac18d32d.exe
Size

7KB
MD5

85de2f8baef28843b4810831ac18d32d
SHA1

3642a0dae41a4762eb84b609381024f1d9ab4409
SHA256

570af53d8319af5b0a312af11ffb25b3b57a49c777396bb879bb08088f9ae6fa
SHA512

6dcaeb35dc7bc3c992c3f59099937695756fad23c8794bb3305ad1c7b43766ff68f39f6a289461aecf1020846bc665a7ea4643296ddaeafc8ed0a7959c9b55e3
SSDEEP

192:cpGPZl2vVAfNxl1THsXxgzgVG2vRq3kL76InQA:cpGGUxDTHSRhoO

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2680	3076	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\85de2f8baef28843b4810831ac18d32d.exe
"C:\Users\Admin\AppData\Local\Temp\85de2f8baef28843b4810831ac18d32d.exe"
1⤵
PID:3076
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3076 -s 292
  2⤵
  - Program crash
  PID:2680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3076 -ip 3076
1⤵
PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads