260ad7f73e3ce309b12d124b270c66259dfd16e940c201a76182e80a3782a146 | Triage

Analysis

max time kernel
130s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2023 17:47

Sharing

Report Analysis Logs

General

Target

Ship2005-20170104.exe
Size

6.5MB
MD5

c7c65dced38e2b0425da498922ef5694
SHA1

ca566ef783be541ef7f699cb17972a7cf05164a4
SHA256

260ad7f73e3ce309b12d124b270c66259dfd16e940c201a76182e80a3782a146
SHA512

b7950b84979a1b19aff4c282fa44c00457c3e9d0c620739aa3fa6885cb01ec2730fbf49c6711f074b89a32093f51c4d4c8d467f5eb1de997341a7f819a24b0b3
SSDEEP

196608:DGRH3ROi1/vd6EAEpCGJGYhPCc/jI54vAyb1uVZ:YH3EyvUEbCGJJhm4vT1

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4524 2120 WerFault.exe Ship2005-20170104.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005-20170104.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005-20170104.exe"
1⤵
PID:2120

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 636
2⤵
- Program crash
PID:4524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2120 -ip 2120
1⤵
PID:4084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2120-133-0x0000000000400000-0x000000000284D000-memory.dmp

Filesize
36.3MB

Download