de08c69d06b2f176058aa6001b9f9195ef9599f1f79b783e21762046258583d3 | Triage

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2024, 20:51

Sharing

Report Analysis Logs

General

Target

dcrat/data/DCRCC.exe
Size

24KB
MD5

7369469d49c34493f1b8a06fc89d9c7f
SHA1

956b5e6933b6c8141fe6aa16d97b15fc0e985e95
SHA256

8f5b38fdde20187e5ab965e60c024b98def9d565ea23f596da4fe13d12e5f5b8
SHA512

1777cc2a5e11115d71b92c5790be558838aed0173a3d7ff288db44674a0b3151026515d74518a960c2467d9be549cd47567123b59330d7684a9b2919b707a1a3
SSDEEP

384:QVkGGnEOjdf9FZiJSi6gi8Yd6aHmcL/QKN+eglriL5nOIj3vFy:tFdf9CJ+F8IG1KGleNB5y

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4596	3964	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\dcrat\data\DCRCC.exe
"C:\Users\Admin\AppData\Local\Temp\dcrat\data\DCRCC.exe"
1⤵
PID:3964
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3964 -s 260
  2⤵
  - Program crash
  PID:4596

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3964 -ip 3964
1⤵
PID:3380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3964-0-0x0000000000AD0000-0x0000000000ADC000-memory.dmp

Filesize
48KB

Download
memory/3964-1-0x0000000075250000-0x0000000075A00000-memory.dmp

Filesize
7.7MB

Download
memory/3964-2-0x0000000005460000-0x0000000005470000-memory.dmp

Filesize
64KB

Download
memory/3964-3-0x0000000075250000-0x0000000075A00000-memory.dmp

Filesize
7.7MB

Download