0889c793582a4d43288cfb9adff490a1ba363d3ba3e987a8dab4937e7b84f0e8 | Triage

Analysis

max time kernel
93s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-02-2024 23:21

Sharing

Report Analysis Logs

General

Target

ad1dfd677d81fc31f352593519f333d4.exe
Size

119KB
MD5

ad1dfd677d81fc31f352593519f333d4
SHA1

c25336512e3c5e1924c3c9d65e21bdc8170b11e1
SHA256

0889c793582a4d43288cfb9adff490a1ba363d3ba3e987a8dab4937e7b84f0e8
SHA512

16efc2fbf5c6ccaf0bf3788c0754f39e2221b71d22e5d5aa0feb5aa76033af1c110570be4682bc85b62b7916c3ec6cac06947c095b21b94068443e183904ba5c
SSDEEP

1536:Sh4tXBs/227AA6RM3wZAOC3ZiZbUnZElx:dBcGbZAOgZhnZ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
932	1036	WerFault.exe	58

C:\Users\Admin\AppData\Local\Temp\ad1dfd677d81fc31f352593519f333d4.exe
"C:\Users\Admin\AppData\Local\Temp\ad1dfd677d81fc31f352593519f333d4.exe"
1⤵
PID:1036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1036 -s 220
  2⤵
  - Program crash
  PID:932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1036 -ip 1036
1⤵
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1036-0-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download
memory/1036-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/1036-2-0x0000000000400000-0x000000000046C000-memory.dmp

Filesize
432KB

Download