d89ce9aba65ebcfd8a28321e25dea360a7965d0fda2f895bba3a9e2f1cdd5aa1 | Triage

Analysis

max time kernel
93s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
26-02-2024 06:43

Sharing

Report Analysis Logs

General

Target

a5afde0e3e80d9a521017cdfe84064d0.exe
Size

45KB
MD5

a5afde0e3e80d9a521017cdfe84064d0
SHA1

e51cad263e94670b073412de530742f3431db622
SHA256

d89ce9aba65ebcfd8a28321e25dea360a7965d0fda2f895bba3a9e2f1cdd5aa1
SHA512

fbceea4309e9bc39785353ad1913a1009a543ddcaa219a7b014c26941c52e39120b5bbc6925cd30b65cde8c111632ead96de358f171681459a07ca7cfb91e595
SSDEEP

768:RIhi3I9NV/K0a8pWNp1ndqvG1fGKAjHslK1ycDN4PRg8:mhi49fo/7Y18

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4596 4212 WerFault.exe a5afde0e3e80d9a521017cdfe84064d0.exe

C:\Users\Admin\AppData\Local\Temp\a5afde0e3e80d9a521017cdfe84064d0.exe
"C:\Users\Admin\AppData\Local\Temp\a5afde0e3e80d9a521017cdfe84064d0.exe"
1⤵
PID:4212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4212 -s 484
2⤵
- Program crash
PID:4596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4212 -ip 4212
1⤵
PID:832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...