27bce6bacf88feeacfd6067426c1eff4258d3a2ac3a1105dd6a1c93f65485d5c | Triage

Analysis

max time kernel
157s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/02/2023, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Swift.exe
Size

64KB
MD5

c3dda199739ccc5699ea98f22eb1d0ba
SHA1

8ca42b38a4df27fbd18b060092009b1092f79932
SHA256

8cd3a69637a14aeb7a0db8c47a197e8cdee48d1c995b8ea848449b1f206a8d24
SHA512

828ebcaa0b8d7fbcb50768669921980ae389582ef25ea643541fa89a60d9c34639e170cc80eb378c56028b4ef1229141faa93f896b3c724f963139266c7c0dca
SSDEEP

768:M4OE/9oA9EfutLtTP44IuAgpjELM40LO6dusn04el:BOe9oA9EfKP4yFp+M40ymuL3l

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4720	2084	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\Swift.exe
"C:\Users\Admin\AppData\Local\Temp\Swift.exe"
1⤵
PID:2084
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2084 -s 1204
  2⤵
  - Program crash
  PID:4720

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 180 -p 2084 -ip 2084
1⤵
PID:3900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-132-0x0000015ECAD40000-0x0000015ECAD54000-memory.dmp

Filesize
80KB

Download
memory/2084-133-0x00007FF905BB0000-0x00007FF906671000-memory.dmp

Filesize
10.8MB

Download
memory/2084-134-0x00007FF905BB0000-0x00007FF906671000-memory.dmp

Filesize
10.8MB

Download
memory/2084-135-0x00007FF905BB0000-0x00007FF906671000-memory.dmp

Filesize
10.8MB

Download