97373b0ef60cf125cf1d29e3a75e41923d79e587f4ffffe4db808e68fcfe6d65 | Triage

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07-03-2024 16:43

Sharing

Report Analysis Logs

General

Target

b92c9498b59f8994b9800b0fbc1b9403.exe
Size

421KB
MD5

b92c9498b59f8994b9800b0fbc1b9403
SHA1

d66dec12f044a7ddeb3c9510ab97344c6a202d7c
SHA256

97373b0ef60cf125cf1d29e3a75e41923d79e587f4ffffe4db808e68fcfe6d65
SHA512

cc4ba50b11aa451092f0f8ad1d3410189ccc0440bbec2c6a398084fc8ec1543437cc99f06c235ccf5a3ffb2f284daa10215e8c536d8af15567e15d604d977c7e
SSDEEP

12288:YWrUsI/uUIPO5haJnCiEIjxB+KZLfAfTTGPawa/:YyymUImXvYUK1fTC

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4216 4648 WerFault.exe b92c9498b59f8994b9800b0fbc1b9403.exe

C:\Users\Admin\AppData\Local\Temp\b92c9498b59f8994b9800b0fbc1b9403.exe
"C:\Users\Admin\AppData\Local\Temp\b92c9498b59f8994b9800b0fbc1b9403.exe"
1⤵
PID:4648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4648 -s 584
2⤵
- Program crash
PID:4216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4648 -ip 4648
1⤵
PID:3400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4648-0-0x0000000000D50000-0x0000000000D51000-memory.dmp

Filesize
4KB

Download
memory/4648-1-0x0000000001000000-0x00000000010CF000-memory.dmp

Filesize
828KB

Download