de08c69d06b2f176058aa6001b9f9195ef9599f1f79b783e21762046258583d3 | Triage

Resubmissions

04-03-2024 05:33

240304-f84jnsca52 10

04-03-2024 04:18

240304-exd9zahe9z 10

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04-03-2024 04:18

Sharing

Report Analysis Logs

General

Target

dcrat/data/DCRCC.exe
Size

24KB
MD5

7369469d49c34493f1b8a06fc89d9c7f
SHA1

956b5e6933b6c8141fe6aa16d97b15fc0e985e95
SHA256

8f5b38fdde20187e5ab965e60c024b98def9d565ea23f596da4fe13d12e5f5b8
SHA512

1777cc2a5e11115d71b92c5790be558838aed0173a3d7ff288db44674a0b3151026515d74518a960c2467d9be549cd47567123b59330d7684a9b2919b707a1a3
SSDEEP

384:QVkGGnEOjdf9FZiJSi6gi8Yd6aHmcL/QKN+eglriL5nOIj3vFy:tFdf9CJ+F8IG1KGleNB5y

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1996 212 WerFault.exe DCRCC.exe

C:\Users\Admin\AppData\Local\Temp\dcrat\data\DCRCC.exe
"C:\Users\Admin\AppData\Local\Temp\dcrat\data\DCRCC.exe"
1⤵
PID:212
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 212 -s 820
  2⤵
  - Program crash
  PID:1996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 212 -ip 212
1⤵
PID:568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/212-0-0x00000000007A0000-0x00000000007AC000-memory.dmp

Filesize
48KB

Download
memory/212-1-0x0000000074B70000-0x0000000075320000-memory.dmp

Filesize
7.7MB

Download
memory/212-2-0x0000000005010000-0x0000000005020000-memory.dmp

Filesize
64KB

Download
memory/212-3-0x0000000074B70000-0x0000000075320000-memory.dmp

Filesize
7.7MB

Download