0f0dcf3c9e783f3297c03bed8780af5f0b8078d35530f2ff010def41e2ebcdc6 | Triage

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
26-02-2024 12:50

Sharing

Report Analysis Logs

General

Target

a664ecc708de93fc09419aabea109c4a.exe
Size

312KB
MD5

a664ecc708de93fc09419aabea109c4a
SHA1

b3599d8b9da20b5fd2f759f9ae1d29f4e899a6dd
SHA256

0f0dcf3c9e783f3297c03bed8780af5f0b8078d35530f2ff010def41e2ebcdc6
SHA512

d9e27ba400d17427933e15d97c371469df3fa3424e78b39f5c8bf506d5fc0103ed009f06e9db373a2756542a30968df49dc9db173f3b9163c24dea4df10268af
SSDEEP

6144:2kIovN3S8eZRalDd+FkrsRoGwq9sGod1D63:KCN35kRQMFksnwAs31D

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2408	1948	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\a664ecc708de93fc09419aabea109c4a.exe
"C:\Users\Admin\AppData\Local\Temp\a664ecc708de93fc09419aabea109c4a.exe"
1⤵
PID:1948
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1948 -s 492
  2⤵
  - Program crash
  PID:2408

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1948 -ip 1948
1⤵
PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-0-0x0000000000400000-0x0000000000472000-memory.dmp

Filesize
456KB

Download
memory/1948-1-0x0000000000AA0000-0x0000000000AD2000-memory.dmp

Filesize
200KB

Download
memory/1948-2-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/1948-3-0x0000000000400000-0x0000000000472000-memory.dmp

Filesize
456KB

Download