193d4af4e5b7459ad252eb2484692dcc30f2f57bd3e6e8078c144229ba4ceafa | Triage

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24/08/2023, 11:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ForgeCert.exe
Size

12KB
MD5

2743b648ffac6d7d6d0d68c90ba58e24
SHA1

df1f570110c690f7103c82032ae66bcc550b0c5c
SHA256

193d4af4e5b7459ad252eb2484692dcc30f2f57bd3e6e8078c144229ba4ceafa
SHA512

a11e0b9f94e980a67dfcad6e05023356556fd73e50f3e4564cda58c2f74cd74415dc4f94c6e017ef8b556e8f19fbf0b809c3e5d9ee3c40ff4662fcd280092b27
SSDEEP

192:wfuhyNvoBy08VxqHpEy+/J5aNW175Y2GD0MH2Qnm2dR6ux4tZC:DhyWLnHWtB5aNWVG0FCRnatZ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1832	1188	WerFault.exe	30

C:\Users\Admin\AppData\Local\Temp\ForgeCert.exe
"C:\Users\Admin\AppData\Local\Temp\ForgeCert.exe"
1⤵
PID:1188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1188 -s 824
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1188 -ip 1188
1⤵
PID:4908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1188-0-0x0000000000B30000-0x0000000000B3A000-memory.dmp

Filesize
40KB

Download
memory/1188-1-0x0000000074F30000-0x00000000756E0000-memory.dmp

Filesize
7.7MB

Download
memory/1188-2-0x0000000074F30000-0x00000000756E0000-memory.dmp

Filesize
7.7MB

Download