c829603ab4fbfcff2d1c29f024a558b082e42e0c8b4cb35f26af8afe515e14e9 | Triage

Analysis

max time kernel
124s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 20:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bbc5851a85e0ee684379868c171d28e3.exe
Size

286KB
MD5

bbc5851a85e0ee684379868c171d28e3
SHA1

65eb3673b933804237848796274010dcea8ba185
SHA256

c829603ab4fbfcff2d1c29f024a558b082e42e0c8b4cb35f26af8afe515e14e9
SHA512

2dca5619d4fd843dae6fc30e3aff9bc0d77428f41e0bb843ecf0cbec39593ae854316e8c8d552d0fe3a9388de7fca7e8b5851729151441ede156c8f3d101398c
SSDEEP

3072:XdHIfAHkKZ4sgehtZTWnz3gVrUHJdyln:dWAHkB8A8AH3U

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4544	4568	WerFault.exe	84
2816	4568	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\bbc5851a85e0ee684379868c171d28e3.exe
"C:\Users\Admin\AppData\Local\Temp\bbc5851a85e0ee684379868c171d28e3.exe"
1⤵
PID:4568
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 444
  2⤵
  - Program crash
  PID:4544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 452
  2⤵
  - Program crash
  PID:2816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4568 -ip 4568
1⤵
PID:2056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4568 -ip 4568
1⤵
PID:1328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4568-0-0x00000000009E0000-0x0000000000A2D000-memory.dmp

Filesize
308KB

Download
memory/4568-1-0x00000000009E0000-0x0000000000A2D000-memory.dmp

Filesize
308KB

Download