07bb8e80e6f9ebff4b958ed1bfcec8a09b8f7688ab780d5bbfbf47ced3d39d5c | Triage

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 22:33

Sharing

Report Analysis Logs

General

Target

c9c9b0c8b3f29f91240ead3f2f3c2972.exe
Size

67KB
MD5

c9c9b0c8b3f29f91240ead3f2f3c2972
SHA1

ef179a2265bb545d15ef68e73bf83fb82ec18a2e
SHA256

07bb8e80e6f9ebff4b958ed1bfcec8a09b8f7688ab780d5bbfbf47ced3d39d5c
SHA512

24d893e47b154f761762a778a95a58097d4d382c01b3ea0fd71d26baf4e1e784333d3d726502a2b9c19f690b1ea1f8c843cf5bc7bd861a198b854b2559ff8c69
SSDEEP

1536:5+G+3E8DrznL93zZ0KUKQsYdC+ZvzR2hvBvybyQtO2:5+FDZ0TM+Zr0X

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4416	2480	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\c9c9b0c8b3f29f91240ead3f2f3c2972.exe
"C:\Users\Admin\AppData\Local\Temp\c9c9b0c8b3f29f91240ead3f2f3c2972.exe"
1⤵
PID:2480
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2480 -s 404
  2⤵
  - Program crash
  PID:4416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2480 -ip 2480
1⤵
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2480-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2480-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download