121031d82071078b032bbf9e48bdfdc19bc7e48ad0251c9014447ec541d30e19 | Triage

Analysis

max time kernel
141s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2023 04:19

Sharing

Report Analysis Logs

General

Target

Patch/FL64.exe
Size

287KB
MD5

8d4aee53f9d6ea4a47dc73edd78dcef0
SHA1

4d12d67edd64877831dea463ce67c42ebca6e0ae
SHA256

6cfc98d1ffcdb983e64beac75ccde7d873e3c41fffde2f4d87dd0757eb5a620d
SHA512

54eaa03f18bccaddb04a8dd7127f1e9ce8eefaf1141e3b8684e7f6bbdcc45aa60aa276467f1df9bd361d0ac8c8de398959be18bf2e387dce34550716e44599ec
SSDEEP

6144:gcwjo+g91cs3mfzsIohx4rrZtj7QfGZ7uOs:gcao3R2fzdou3jjZ7uOs

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
372	2580	WerFault.exe	71

C:\Users\Admin\AppData\Local\Temp\Patch\FL64.exe
"C:\Users\Admin\AppData\Local\Temp\Patch\FL64.exe"
1⤵
PID:2580
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2580 -s 624
  2⤵
  - Program crash
  PID:372

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 464 -p 2580 -ip 2580
1⤵
PID:4548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2580-133-0x0000000002C40000-0x0000000005E03000-memory.dmp

Filesize
49.8MB

Download
memory/2580-134-0x0000000002C40000-0x0000000005E03000-memory.dmp

Filesize
49.8MB

Download
memory/2580-135-0x0000000002730000-0x0000000002731000-memory.dmp

Filesize
4KB

Download