eafec6aa4b31af600d733e0b6255b597bd68e1edc0292698be66da5c17febeba | Triage

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/03/2024, 10:42

Sharing

Report Analysis Logs

General

Target

b480c3b6ea793474c145e309684728c8.exe
Size

23KB
MD5

b480c3b6ea793474c145e309684728c8
SHA1

aef9a95aab781a00b1b250842dbca888358382f6
SHA256

eafec6aa4b31af600d733e0b6255b597bd68e1edc0292698be66da5c17febeba
SHA512

ea3b210e76405c95a959b414075f2530e3b1f6e798eb4e85cb73641c1646be50b5d3c1a4048cab98aa91dab7d210600d7df7357ac3b4788e72cdbdd2638bb48f
SSDEEP

384:Wnk+x9UaWN7kjGPqMyVqlWiCx0Q8rA+1LO+6G5:Wnp98qMyUnb7YG

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4488	4644	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\b480c3b6ea793474c145e309684728c8.exe
"C:\Users\Admin\AppData\Local\Temp\b480c3b6ea793474c145e309684728c8.exe"
1⤵
PID:4644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4644 -s 268
  2⤵
  - Program crash
  PID:4488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4644 -ip 4644
1⤵
PID:1064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4644-0-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download