86f230bb45d82b823ebd68cb8e192fa95abe4381002adbcfb0b3f6d9b47be4e0 | Triage

Analysis

max time kernel
499s
max time network
513s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
28-03-2023 09:28

Sharing

Report Analysis Logs

General

Target

Twitch Downloader/MonoPosixHelper.dll
Size

85KB
MD5

903281527ef99e63fe55555882afb89f
SHA1

5ffc52328fe7551ca778ab4329a09ea9fc2288f7
SHA256

a57141b26d6ea3326b165bdcb15ca2bcd34737370f52358e12ffc8df41b92c62
SHA512

6341c571f965525c2d19c4ee159dfcc7c53bcb455c2c1fe889298cef05cbe5c681902d595893a2756d43ac21aeca406403c09387c231af80e16f16492fecca45
SSDEEP

1536:Xeth6FCN3CvmsjQOuxDQxFcqonToIfrIOQIOAhq8Ge:XC6Q3CeCQOGTBfdGAzd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1100 1944 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Twitch Downloader\MonoPosixHelper.dll",#1
1⤵
PID:1944

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1944 -s 332
2⤵
- Program crash
PID:1100

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 204 -p 1944 -ip 1944
1⤵
PID:3812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...