b2f6e7e1fc7a1841ed0eda64537a13babd91d933f1e4f9140b8ae70db3ec6ad8 | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/11/2022, 20:00

Sharing

Report Analysis Logs

General

Target

FACTURA_.exe
Size

657KB
MD5

56ae83862d17f1c0992048aee1a66236
SHA1

1677eb68958b88dab03d26146a5f966ae55624ce
SHA256

ef22b7c6c43652d25c1cd3e8d2dbcb6b35bd41fb405925bb9175814ababf5729
SHA512

784ba6d8fa084c3c041f3135fa1d710911dcb424763cf9833ff8d8ad2456849fef3d533c5c5b28812d5faa4f6e06c41c38440de2ef433ad32e14ecd2df71123b
SSDEEP

12288:Mfsf26N6ouHH1JQ2iNBw29GfSPPVusJ3aGp9I7pKxuazaBMgIvGdkdYeQ:TN5u1+15GUwsJ3ZG7+ull

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2548	5100	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\FACTURA_.exe
"C:\Users\Admin\AppData\Local\Temp\FACTURA_.exe"
1⤵
PID:5100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 856
  2⤵
  - Program crash
  PID:2548

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5100 -ip 5100
1⤵
PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5100-132-0x0000000000B20000-0x0000000000BCA000-memory.dmp

Filesize
680KB

Download
memory/5100-133-0x0000000007FD0000-0x0000000008574000-memory.dmp

Filesize
5.6MB

Download
memory/5100-134-0x0000000007AC0000-0x0000000007B52000-memory.dmp

Filesize
584KB

Download