a32eac46006b095ddefcef4eb2f680d48c43dece22fc0a5d80dd816be45abcf4 | Triage

Analysis

max time kernel
241s
max time network
201s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
19/02/2024, 16:42

Sharing

Report Analysis Logs

General

Target

goog1e_meccanica_evoluzione.exe
Size

664KB
MD5

31488136df835f7e4db602866edca4ce
SHA1

eb8747c8ac2cf2e15f4f3dd5ab2a574cf4812a3b
SHA256

a32eac46006b095ddefcef4eb2f680d48c43dece22fc0a5d80dd816be45abcf4
SHA512

c2493bcc037b7f70678dbecdd10a5f81ad0d18e13981a69404366e46bfd1a830e1ab53dd28d5efdb99da82e909b39b34ca892b7c5a15237ff17a8a46415556e2
SSDEEP

12288:Qia4CX5LAQa9QGC0CZVxtqNNe6Pb2FQInmqqMW6fX/jUK0Z:SXu0yOkb23LXbU

Score

3^/10

Malware Config

Signatures

Program crash 3 IoCs

pid	pid_target	Process	procid_target
2872	3604	WerFault.exe	83
3800	2596	WerFault.exe	97
4652	3384	WerFault.exe	102

C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe
"C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe"
1⤵
PID:3604
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3604 -s 288
  2⤵
  - Program crash
  PID:2872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3604 -ip 3604
1⤵
PID:3900

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4244

C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe
"C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe"
1⤵
PID:2596
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2596 -s 288
  2⤵
  - Program crash
  PID:3800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 2596 -ip 2596
1⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe
"C:\Users\Admin\AppData\Local\Temp\goog1e_meccanica_evoluzione.exe"
1⤵
PID:3384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3384 -s 256
  2⤵
  - Program crash
  PID:4652

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3384 -ip 3384
1⤵
PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads