37f617799eeb0da99b00e5efd93645f817fef32b8eaf8ab1447468af63b7fd95 | Triage

Analysis

max time kernel
138s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 01:58

Sharing

Report Analysis Logs

General

Target

8b18aea899fbd1d0bbd6a92c7e187ebd.exe
Size

208KB
MD5

8b18aea899fbd1d0bbd6a92c7e187ebd
SHA1

6f412e5adf40cc66135a22f57c61b159e4e4dc93
SHA256

37f617799eeb0da99b00e5efd93645f817fef32b8eaf8ab1447468af63b7fd95
SHA512

e5de59628bca1b0d6be0c126724643c62bad3451bf5402cd8d75a117fde30111a9260b75ea9bfa8f94c5425647e6d0a5bb5b2310c41d126417134e463d43cbdd
SSDEEP

3072:nVHgGc4xGvbwcU9KQ2BBAHmaPx0VoRb5E:OGc4xGxWKQ2Bonx

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4508	1384	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\8b18aea899fbd1d0bbd6a92c7e187ebd.exe
"C:\Users\Admin\AppData\Local\Temp\8b18aea899fbd1d0bbd6a92c7e187ebd.exe"
1⤵
PID:1384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1384 -s 392
  2⤵
  - Program crash
  PID:4508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1384 -ip 1384
1⤵
PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1384-0-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/1384-1-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download