fccabd0d613268af55036352481d2e99f995988f74441e03dcc1ef49ff539a8b | Triage

Analysis

max time kernel
95s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 02:38

Sharing

Report Analysis Logs

General

Target

bd73867a48b1ab9c7898b616dacf4736.exe
Size

262KB
MD5

bd73867a48b1ab9c7898b616dacf4736
SHA1

89cf10870cd0738e0fcde1e02fc289e11b526511
SHA256

fccabd0d613268af55036352481d2e99f995988f74441e03dcc1ef49ff539a8b
SHA512

7b19ce6d0c437939638fd19ee0331b450cb4d0fde1cd2320fa61b089e495657f440a9a92f607a407f7ece7c3c71ebf8d9142a45cf7118d4719f330e867efb239
SSDEEP

6144:GaXwloqk1viC7X6HbCAPNCjfHMsVYYfF6ng9G:MloV1virHbxPNgfHNYWOg9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1544	3984	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\bd73867a48b1ab9c7898b616dacf4736.exe
"C:\Users\Admin\AppData\Local\Temp\bd73867a48b1ab9c7898b616dacf4736.exe"
1⤵
PID:3984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 472
  2⤵
  - Program crash
  PID:1544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3984 -ip 3984
1⤵
PID:4192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3984-0-0x0000000000400000-0x0000000000452000-memory.dmp

Filesize
328KB

Download
memory/3984-1-0x00000000004E0000-0x00000000004E2000-memory.dmp

Filesize
8KB

Download
memory/3984-2-0x0000000000400000-0x0000000000452000-memory.dmp

Filesize
328KB

Download