fd84148426c6188c0bdec2e66d1f4fda9392342adb0c225d64aaacce24ce8653 | Triage

Analysis

max time kernel
94s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-11-2024 03:43

Sharing

Report Analysis Logs

General

Target

file (7).exe
Size

414KB
MD5

5c6416f819bfbca2f1862691a03f68be
SHA1

b26cb187e3ea74fbb76bbea4096aa9315ac4e405
SHA256

b5c2e240ebc4323421fea99a02507a79ea9fba5b29ee9b6cc3e808d288de8c02
SHA512

9288510c7541aace8bd669f2ed8e186760a1d224874234a1d797fd7f64462313308828785e43edd010d332f589f8ba93124fe55879638655d18673d56c0d0b26
SSDEEP

12288:IOkIEyW/jLPWXR8Kwxs/bJYorMvQGuArOQb1K1Gc4nS:AyWPWq/xAxMbrOQJ9c4n

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2108 4716 WerFault.exe file (7).exe

C:\Users\Admin\AppData\Local\Temp\file (7).exe
"C:\Users\Admin\AppData\Local\Temp\file (7).exe"
1⤵
PID:4716
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4716 -s 408
  2⤵
  - Program crash
  PID:2108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4716 -ip 4716
1⤵
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4716-0-0x00000000020D0000-0x00000000020E2000-memory.dmp

Filesize
72KB

Download