4f0ce51f8b952551ad2954d94f144c4d5e9531508929fe13301fb0a8952db226 | Triage

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03-02-2024 17:04

Sharing

Report Analysis Logs

General

Target

8cde42d3d7d3e95bd9125ac37cf02997.exe
Size

15KB
MD5

8cde42d3d7d3e95bd9125ac37cf02997
SHA1

a87a45f8e3e752946f02eca961f240a63f490ea7
SHA256

4f0ce51f8b952551ad2954d94f144c4d5e9531508929fe13301fb0a8952db226
SHA512

431203d1b5f44cea6405d24a25780da016081f9d29aba4597f78dba67daa1b0e84426bd852201a541d5841940abe4edb80eabe6bae2426119476674a87fed866
SSDEEP

384:h1VhHt299GEgIkb+VwLNsepaKKkLVteNq0um/UNl:h98bLgXuwLNsepRKUYN4m/

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3844	3744	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\8cde42d3d7d3e95bd9125ac37cf02997.exe
"C:\Users\Admin\AppData\Local\Temp\8cde42d3d7d3e95bd9125ac37cf02997.exe"
1⤵
PID:3744
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3744 -s 348
  2⤵
  - Program crash
  PID:3844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3744 -ip 3744
1⤵
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3744-0-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download
memory/3744-1-0x00000000005B0000-0x00000000005B3000-memory.dmp

Filesize
12KB

Download
memory/3744-2-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download