16b8c5b1165760b18e858731c0d1e7580e7a843cec1d0736f1e6aaa7b41bdffd | Triage

Analysis

max time kernel
91s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 22:31

Sharing

Report Analysis Logs

General

Target

c704733ade63971518ce4be01511d769.exe
Size

593KB
MD5

c704733ade63971518ce4be01511d769
SHA1

5f0a5c7dc6fdc3dd16a1064dcee97bdf877e360c
SHA256

16b8c5b1165760b18e858731c0d1e7580e7a843cec1d0736f1e6aaa7b41bdffd
SHA512

7db489dbf84dd1f52967c461cb4fd7ad0fd0e5829c7844f6664777cdb4085be58c0220317d2153b5706b3a3ec9f64a3235cf50f7eca3863ecec9c332e7e681e7
SSDEEP

6144:FC2MDzw0FWdw9x2Ws4VP+CR0CO2HJHB/d9Y:Q2czw0IIRP2UJhnY

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5028	1552	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\c704733ade63971518ce4be01511d769.exe
"C:\Users\Admin\AppData\Local\Temp\c704733ade63971518ce4be01511d769.exe"
1⤵
PID:1552
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1552 -s 308
  2⤵
  - Program crash
  PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1552 -ip 1552
1⤵
PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1552-0-0x0000000000270000-0x0000000000307000-memory.dmp

Filesize
604KB

Download
memory/1552-1-0x0000000000270000-0x0000000000307000-memory.dmp

Filesize
604KB

Download