45fc0ad2155a7cd2c3d048a0c3e7e8f965ae44696dbe775d6749dc5da0203c43 | Triage

Analysis

max time kernel
93s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2024, 07:43

Sharing

Report Analysis Logs

General

Target

c2cc7e77a5002bf7512c072b9ac4e230N.exe
Size

39KB
MD5

c2cc7e77a5002bf7512c072b9ac4e230
SHA1

a39c5edc1653da0e9dec0d4f09df1dd4e93dd53d
SHA256

45fc0ad2155a7cd2c3d048a0c3e7e8f965ae44696dbe775d6749dc5da0203c43
SHA512

bf674e45bcf4cac65a3bff437418d5917dbda5386911c5e690c4e6b642a5d310fe632f9ce657e9e496ad6c56dc487524ee871d4b1e15b5339a9ca0c3d659ba06
SSDEEP

768:uLNJJkw4H7P8PBZd+/bEcK7l2H8AvxIEwe:u1kVDWZEbEcZcQD

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3228	3424	WerFault.exe	82
4156	3424	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\c2cc7e77a5002bf7512c072b9ac4e230N.exe
"C:\Users\Admin\AppData\Local\Temp\c2cc7e77a5002bf7512c072b9ac4e230N.exe"
1⤵
PID:3424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 356
  2⤵
  - Program crash
  PID:3228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 360
  2⤵
  - Program crash
  PID:4156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3424 -ip 3424
1⤵
PID:3916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 3424 -ip 3424
1⤵
PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3424-0-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download
memory/3424-1-0x0000000000400000-0x000000000040E000-memory.dmp

Filesize
56KB

Download