9d71ee189111bc08ce384a02a16be8594ccd91c8ef5c0d1dde1ce2ef97ffdb5c | Triage

Analysis

max time kernel
105s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2023, 19:38

Sharing

Report Analysis Logs

General

Target

ORDERS4500215527.exe
Size

689KB
MD5

65ab45a78dc696699f075f57269fc55e
SHA1

d154122b1b3bf9e5f4a651dd419ef32146641452
SHA256

9d71ee189111bc08ce384a02a16be8594ccd91c8ef5c0d1dde1ce2ef97ffdb5c
SHA512

b06842e7807dd249c5cd3abcfb47cb8a37d6892932f5e232a6156f6d4d59a7940adf530267c6241287b313a9c0f3eca169e55bf6a215b91ef5a292359ac083d9
SSDEEP

12288:ZNZUq1LbcAhYKq0bs61BUdfsnhviCrP62CaKyu:iBR30jPdKCrPcaK

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	224	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\ORDERS4500215527.exe
"C:\Users\Admin\AppData\Local\Temp\ORDERS4500215527.exe"
1⤵
PID:224
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 224 -s 1080
  2⤵
  - Program crash
  PID:1740

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 224 -ip 224
1⤵
PID:4820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/224-133-0x0000000000270000-0x0000000000322000-memory.dmp

Filesize
712KB

Download
memory/224-134-0x000000001AF10000-0x000000001AF20000-memory.dmp

Filesize
64KB

Download
memory/224-135-0x000000001AF10000-0x000000001AF20000-memory.dmp

Filesize
64KB

Download