8a61ca9557ea56963ffc61ce50db4efd26c5653b063beabb820b09e3e092ed6e | Triage

Analysis

max time kernel
93s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-02-2024 10:46

Sharing

Report Analysis Logs

General

Target

abb1de2e119f4aaca055600e514c5f59.exe
Size

116KB
MD5

abb1de2e119f4aaca055600e514c5f59
SHA1

fb927610f4e2a500aa04f84cb2890865aa0566fc
SHA256

8a61ca9557ea56963ffc61ce50db4efd26c5653b063beabb820b09e3e092ed6e
SHA512

32dd60075da553f5c2fd126da82090a5fa89af6ebbca270897445a7ac26d839460e4c8c9be7cefeb43decfd02bafca47ba8daadfa479bb30e4aeee8c1d4891cc
SSDEEP

3072:E2YKaRfYBx4eS76by+bdJWMa8Evz57wHXv:E2sRfYBxSevTKdov

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2188 4016 WerFault.exe abb1de2e119f4aaca055600e514c5f59.exe

C:\Users\Admin\AppData\Local\Temp\abb1de2e119f4aaca055600e514c5f59.exe
"C:\Users\Admin\AppData\Local\Temp\abb1de2e119f4aaca055600e514c5f59.exe"
1⤵
PID:4016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4016 -s 500
2⤵
- Program crash
PID:2188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4016 -ip 4016
1⤵
PID:1832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...