344dccaee8b5e51ce858e7e014fe926976a4e1ccf50baa8f04acb6451afdaed8 | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31-05-2024 01:37

Sharing

Report Analysis Logs

General

Target

56983b8f23ce326fbbf4e1253e2f7540.exe
Size

71KB
MD5

56983b8f23ce326fbbf4e1253e2f7540
SHA1

c52b9d2d943e1723efa5b9ffd3f9553b692701da
SHA256

344dccaee8b5e51ce858e7e014fe926976a4e1ccf50baa8f04acb6451afdaed8
SHA512

83c066876a54edce99c5c67b4f8cd819defb25a0a219d15cefb6ab94f3779c332db2e74ff43f786af129f52be6c6b757c158f362c176847ba429947dafcc4e45
SSDEEP

1536:Xgs2wgCqbfusDBegRmY3xHER7WRWdpIAUc:VgCqCsDB/Rm8klpIb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1596 808 WerFault.exe 56983b8f23ce326fbbf4e1253e2f7540.exe

C:\Users\Admin\AppData\Local\Temp\56983b8f23ce326fbbf4e1253e2f7540.exe
"C:\Users\Admin\AppData\Local\Temp\56983b8f23ce326fbbf4e1253e2f7540.exe"
1⤵
PID:808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 808 -s 492
2⤵
- Program crash
PID:1596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 808 -ip 808
1⤵
PID:3824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads