e4960d8ebe12da7bda6b4d94168c6ccb4680fae974e0f934f21e1ea8f7e82bba | Triage

Analysis

max time kernel
144s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 10:49

Sharing

Report Analysis Logs

General

Target

a1add30552853926cdd3cf3929478952.exe
Size

55KB
MD5

a1add30552853926cdd3cf3929478952
SHA1

fbfcd983b96875998f385d319340e3beebed0d6e
SHA256

e4960d8ebe12da7bda6b4d94168c6ccb4680fae974e0f934f21e1ea8f7e82bba
SHA512

236710eba539c5645223edebfdae028c3088a0884932a4cd7e7c0d52deb41c0f174f9869abd1de5d90cc1ce5250e0b8b622c91a1e613930923ed0a95c2568608
SSDEEP

1536:VCtOrpkRo+3L9sjucUHkcIsU/wV4DB7cfLXZ71:hUo+3ZsTGkJwGDBQTXZR

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3920	4552	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\a1add30552853926cdd3cf3929478952.exe
"C:\Users\Admin\AppData\Local\Temp\a1add30552853926cdd3cf3929478952.exe"
1⤵
PID:4552
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4552 -s 224
  2⤵
  - Program crash
  PID:3920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4552 -ip 4552
1⤵
PID:4004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4552-0-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/4552-1-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download