f920c113b680ae89ec650603e52dff1480f6879699a7d2af4f9e736c3f06e6a1 | Triage

Analysis

max time kernel
94s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07-07-2024 04:03

Sharing

Report Analysis Logs

General

Target

3d7dacbf20214826dc5fcab0bf119fc0N.exe
Size

1.4MB
MD5

3d7dacbf20214826dc5fcab0bf119fc0
SHA1

0bb808a3b4d6a471459c3feba380a3ba16a5a9c4
SHA256

f920c113b680ae89ec650603e52dff1480f6879699a7d2af4f9e736c3f06e6a1
SHA512

767da56de6ac3678466791d2fd3268c72f3020e4eb3d7784d1e9f15af4274ba461d70e5c49f4a7b26b387f29fa61cc8997091924bbf217d2222bdef44036a216
SSDEEP

24576:0en3UPh+BnqC6u2cbMXuoAY3c/pm4oHMbX3argJvi4:0o1RummzsbXdNi

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4900	3136	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\3d7dacbf20214826dc5fcab0bf119fc0N.exe
"C:\Users\Admin\AppData\Local\Temp\3d7dacbf20214826dc5fcab0bf119fc0N.exe"
1⤵
PID:3136
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3136 -s 636
  2⤵
  - Program crash
  PID:4900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3136 -ip 3136
1⤵
PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3136-0-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download
memory/3136-1-0x0000000000400000-0x0000000000578000-memory.dmp

Filesize
1.5MB

Download