95654525c7022015e1177ff2e8eba84837f6808b6568bccd87af3e55a3c1f481 | Triage

Analysis

max time kernel
15s
max time network
133s
platform
windows10_x64
resource
win10v20210408
submitted
22-07-2021 15:15

Sharing

Report Analysis Logs

General

Target

AuditApr2021.xlsx.exe
Size

457KB
MD5

583ad904b51ce0851f9f2cb056a9a2e3
SHA1

daa33b986624b2156b336392c4d5cc1ddd184e56
SHA256

95654525c7022015e1177ff2e8eba84837f6808b6568bccd87af3e55a3c1f481
SHA512

ec96716efc1fe8662df5d9f0defa0f9d831a794d96bf8b5ad6c663395dd97c4127dbb4c1e8f73185a001722ef7861bedefda598df91739fd0a43ee05940d8f9c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2284 1456 WerFault.exe AuditApr2021.xlsx.exe
Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

AuditApr2021.xlsx.exe

pid process

1456 AuditApr2021.xlsx.exe
1456 AuditApr2021.xlsx.exe

C:\Users\Admin\AppData\Local\Temp\AuditApr2021.xlsx.exe
"C:\Users\Admin\AppData\Local\Temp\AuditApr2021.xlsx.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1456

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1456 -s 248
2⤵
- Program crash
PID:2284

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1456-114-0x0000000140000000-0x0000000140069000-memory.dmp

Filesize
420KB

Download
memory/1456-120-0x0000000001F00000-0x0000000001F65000-memory.dmp

Filesize
404KB

Download