26a79edcdbc1e6811cb991cc1b8ec04af24f29fc4460c47522c94b42a9d97141 | Triage

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 13:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8c685d451c3f262c749e58115dbb13b8.exe
Size

470KB
MD5

8c685d451c3f262c749e58115dbb13b8
SHA1

5ec962d9c512bc875f1ea91cdaf2e8dbb0cb3e67
SHA256

26a79edcdbc1e6811cb991cc1b8ec04af24f29fc4460c47522c94b42a9d97141
SHA512

ccfd9709a08ae0b295871b18028deb05708c1135f2d73e5167fc1a2aa24280bb1eb621ac76d448127b450ed1dfc790d39475954b6e347b3e1afbc9e36e42f171
SSDEEP

12288:YgnJg2EYNxDIBuOFe7/uT7xnHJNjiHmfN9w:xnJg2ttIoOFdT7ZJNjiH

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4420	4900	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\8c685d451c3f262c749e58115dbb13b8.exe
"C:\Users\Admin\AppData\Local\Temp\8c685d451c3f262c749e58115dbb13b8.exe"
1⤵
PID:4900
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 488
  2⤵
  - Program crash
  PID:4420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4900 -ip 4900
1⤵
PID:4376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4900-0-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download
memory/4900-2-0x0000000000400000-0x000000000047E000-memory.dmp

Filesize
504KB

Download