c1bdc0d2ff4e7474b7fd2a04e5a0607d18ba176423161d4ff95f2f2c7d8e5abf | Triage

Analysis

max time kernel
154s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 09:28

Sharing

Report Analysis Logs

General

Target

b71651ef52a8784cf57d189cb420043f.exe
Size

40KB
MD5

b71651ef52a8784cf57d189cb420043f
SHA1

ff044f3aeb579405bd7ca0480b47c47aa170f398
SHA256

c1bdc0d2ff4e7474b7fd2a04e5a0607d18ba176423161d4ff95f2f2c7d8e5abf
SHA512

cd89cccdc4f70560f2269140c06e24f312489882542d0ba3372403be70b77733c12b249eaf85bf31b7cb95dca7ec60c314fb2cf6b3df9e1671ba229e5949c54e
SSDEEP

384:eTFCB6dIl+80GKaa9AXIxUPf4x3/hTZk67Joy:oUBJl+80ValTPk3pD9o

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5024	4040	WerFault.exe	93

C:\Users\Admin\AppData\Local\Temp\b71651ef52a8784cf57d189cb420043f.exe
"C:\Users\Admin\AppData\Local\Temp\b71651ef52a8784cf57d189cb420043f.exe"
1⤵
PID:4040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4040 -s 288
  2⤵
  - Program crash
  PID:5024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4040 -ip 4040
1⤵
PID:2192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4112 --field-trial-handle=2304,i,7548677271533893574,11048237606705436109,262144 --variations-seed-version /prefetch:8
1⤵
PID:4672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads