5dcebb347e8a7b6f1c99a3b9bc1d3315d4b845ef570cb80590a61996908c8fd4 | Triage

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2024 12:01

Sharing

Report Analysis Logs

General

Target

d60f0ce696188646c2debd97cec68458.exe
Size

152KB
MD5

d60f0ce696188646c2debd97cec68458
SHA1

1f54969a59209e757401d2d30dbef3183bf78c55
SHA256

5dcebb347e8a7b6f1c99a3b9bc1d3315d4b845ef570cb80590a61996908c8fd4
SHA512

f1ac8ee6a76aad871db9c3f135ab6b9f5670ffff14236e47ab409f62f6952d3c4f6b2c185b7019a9c83665ad80f60072e4e2c4e030175c4b27ce7597392cec82
SSDEEP

3072:/fEc+Y5PV3Fcg9TEfnOhot9LykQiXJFvdkQaN9f7:/fEtcEgVloRzdGt

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1648	1736	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\d60f0ce696188646c2debd97cec68458.exe
"C:\Users\Admin\AppData\Local\Temp\d60f0ce696188646c2debd97cec68458.exe"
1⤵
PID:1736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1736 -s 488
  2⤵
  - Program crash
  PID:1648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1736 -ip 1736
1⤵
PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1736-0-0x0000000000690000-0x000000000069A000-memory.dmp

Filesize
40KB

Download