0eacd5abde04d35ed246ebd24f5350c761c0f176847b4791ccea24dae95a2c9f | Triage

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 09:01

Sharing

Report Analysis Logs

General

Target

a177a284cd1ae4f1d110b95c46c19606.exe
Size

320KB
MD5

a177a284cd1ae4f1d110b95c46c19606
SHA1

5e9fb5773ef8442a697338a87fa1c18b8e46d9c7
SHA256

0eacd5abde04d35ed246ebd24f5350c761c0f176847b4791ccea24dae95a2c9f
SHA512

b2e2fe790d07104942166c08bc936f7403332b51cb4f0f956b0c11dcf85e37eaff8f10fc8b929a81800e3422a183e4434c8ac0749814a3ea786232990eaa8528
SSDEEP

6144:DF0jzdT9d941odtA8KnQynoeJcFBVFE24qEDRm:DKjzZ9d93dtAhX6VF5QDg

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3656 1456 WerFault.exe a177a284cd1ae4f1d110b95c46c19606.exe

C:\Users\Admin\AppData\Local\Temp\a177a284cd1ae4f1d110b95c46c19606.exe
"C:\Users\Admin\AppData\Local\Temp\a177a284cd1ae4f1d110b95c46c19606.exe"
1⤵
PID:1456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1456 -s 372
2⤵
- Program crash
PID:3656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1456 -ip 1456
1⤵
PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1456-0-0x00000000021F0000-0x0000000002231000-memory.dmp

Filesize
260KB

Download
memory/1456-1-0x0000000002240000-0x0000000002292000-memory.dmp

Filesize
328KB

Download