78dbb664e2867fcd227510cf53111638990a15fe792ea04641f10aa9fcff1258 | Triage

Analysis

max time kernel
138s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16-03-2024 13:33

Sharing

Report Analysis Logs

General

Target

ce2dba593ed3afedfa00a8de8887ec8b.exe
Size

140KB
MD5

ce2dba593ed3afedfa00a8de8887ec8b
SHA1

6b3013cd9d10b9f20b418854f1363294e23ba7a4
SHA256

78dbb664e2867fcd227510cf53111638990a15fe792ea04641f10aa9fcff1258
SHA512

a24684aecbe0bb05c5f6a0dcca744133cb35277236563d710bbea12860ba0d7a858cb74e31ffae829a9786224f8d8ac4d4d99f2ebb1a0612680c7243f7c69fe9
SSDEEP

3072:ZBWePozVRNzRMMTTpN28eNuvOkkFPl88bu28f:ZBNQ1PTH2FNDJ2Eu2s

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4856 2108 WerFault.exe ce2dba593ed3afedfa00a8de8887ec8b.exe

C:\Users\Admin\AppData\Local\Temp\ce2dba593ed3afedfa00a8de8887ec8b.exe
"C:\Users\Admin\AppData\Local\Temp\ce2dba593ed3afedfa00a8de8887ec8b.exe"
1⤵
PID:2108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 248
2⤵
- Program crash
PID:4856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 2108 -ip 2108
1⤵
PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2108-7-0x0000000000630000-0x0000000000730000-memory.dmp

Filesize
1024KB

Download