cb93b81cecd1f21ab966b7d6e8a888b4bf8f215911735fe25bd227fcb3f75577 | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-09-2022 08:28

Sharing

Report Analysis Logs

General

Target

rust2.exe
Size

4.2MB
MD5

21028a03e2284bfb84f54625fa2ce1a8
SHA1

d1db4d6b26e0494895a48dcc9710bef9dd47833b
SHA256

cb93b81cecd1f21ab966b7d6e8a888b4bf8f215911735fe25bd227fcb3f75577
SHA512

aecec4c6da063bc92daa5d61fc799dc75c221ba3f934537da4ca84db65db6aa18f8f782c0cd59bbfac03b0aa163d3df2b76ee822cc49b9211f6512f5dd2d3cdb
SSDEEP

49152:/Z1iGrIoQBLcS6rpe83bMMoEUWdeWoY6DINDcodCbZ2XLF+iHrCwZqdww9IEsbH5:hsMRtH3Jd14nAp

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
3696	4296	WerFault.exe	83

Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes:

rust2.exe

pid	Process
4296	rust2.exe
4296	rust2.exe
4296	rust2.exe
4296	rust2.exe
4296	rust2.exe
4296	rust2.exe

C:\Users\Admin\AppData\Local\Temp\rust2.exe
"C:\Users\Admin\AppData\Local\Temp\rust2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4296
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4296 -s 1352
  2⤵
  - Program crash
  PID:3696

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 476 -p 4296 -ip 4296
1⤵
PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads