0be7a620eff79ecdb95772e986123724a66393534a102e29e1d8b57fafd483d7 | Triage

Analysis

max time kernel
94s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2024, 11:12

Sharing

Report Analysis Logs

General

Target

cdeb0a2e87f3a69f7f70dac51cd8c177.exe
Size

122KB
MD5

cdeb0a2e87f3a69f7f70dac51cd8c177
SHA1

becb3c03be487da96197bb9efd532b94695dcc6f
SHA256

0be7a620eff79ecdb95772e986123724a66393534a102e29e1d8b57fafd483d7
SHA512

37bf8602b6d05006481c9a6d61e79eb289c6c1feaf1efeac030d5de421d8f613d9b34b8647cb3530028c67f7690e8fe4c0b014365aa97b092192247e031c49be
SSDEEP

3072:2uzthvFDcp0DZOCgGdTV72R7LeBlCAwwANB6i1:2uZQUYCgGz7g7LD/NB31

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4768	1720	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\cdeb0a2e87f3a69f7f70dac51cd8c177.exe
"C:\Users\Admin\AppData\Local\Temp\cdeb0a2e87f3a69f7f70dac51cd8c177.exe"
1⤵
PID:1720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 224
  2⤵
  - Program crash
  PID:4768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1720 -ip 1720
1⤵
PID:4480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-0-0x0000000000400000-0x0000000000450000-memory.dmp

Filesize
320KB

Download
memory/1720-1-0x0000000000400000-0x0000000000450000-memory.dmp

Filesize
320KB

Download