8ee0b60536f5619417882bca1bbbee7f735290a29d5c838b410d42fe85b2f43d | Triage

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2023, 18:29

Sharing

Report Analysis Logs

General

Target

伯俊有赞数据同步推送服务.exe
Size

45KB
MD5

34ee2d21b67628165ecab278fddaa524
SHA1

de5f212e3e876d0b165c2074d6bda73450ebda0c
SHA256

8ee0b60536f5619417882bca1bbbee7f735290a29d5c838b410d42fe85b2f43d
SHA512

013e82871551108becf674686ed9b8461e1362d1ff04367d562d1e0f0a817a9ccc74c8109090b671c1c30f139266eaec626dd75142a4bb51c050feaadfb5e578
SSDEEP

768:5HYJZ8uOoRHkoXeIpl2vgG9isKnehhppRkSxws1FzXJeWeloDrT:+DHkoXeI0gGYs+s1FzXJx+oD

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4476	1560	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\伯俊有赞数据同步推送服务.exe
"C:\Users\Admin\AppData\Local\Temp\伯俊有赞数据同步推送服务.exe"
1⤵
PID:1560
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1560 -s 752
  2⤵
  - Program crash
  PID:4476

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1560 -ip 1560
1⤵
PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-133-0x00000000007A0000-0x00000000007B2000-memory.dmp

Filesize
72KB

Download