c71c32909f34548beb5dcafe901e5827186163fd6c74fa5f24288d64247deb40 | Triage

Analysis

max time kernel
141s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 02:25

Sharing

Report Analysis Logs

General

Target

b6467a3ec4ccae4f61bce2ff9e1e9fd1.exe
Size

31KB
MD5

b6467a3ec4ccae4f61bce2ff9e1e9fd1
SHA1

41b4954f32ec9ef961b82b6720e9aa3ea11fe745
SHA256

c71c32909f34548beb5dcafe901e5827186163fd6c74fa5f24288d64247deb40
SHA512

a2c61d9a4f639a585ef35615bfd1bb213580e09cbdbd099217040b8ad071f35112096cb0d173c630c4cef2763f6675e84180c50723006494163aab951241cfba
SSDEEP

768:odgOAv6YtDw8wqg3xwujNDgX19S2+zIXX+o:oM6YtcFxx9Za1kK

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
5100	2872	WerFault.exe	86
4420	2872	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\b6467a3ec4ccae4f61bce2ff9e1e9fd1.exe
"C:\Users\Admin\AppData\Local\Temp\b6467a3ec4ccae4f61bce2ff9e1e9fd1.exe"
1⤵
PID:2872
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2872 -s 372
  2⤵
  - Program crash
  PID:5100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2872 -s 376
  2⤵
  - Program crash
  PID:4420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2872 -ip 2872
1⤵
PID:1200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2872 -ip 2872
1⤵
PID:4444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads