a3c3f7a0014e41ff435db5b87ec92e60ada72a94fc401cb1ef3cf6daf71630e1 | Triage

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 20:56

Sharing

Report Analysis Logs

General

Target

Anycast.exe
Size

1.4MB
MD5

df90ed2b8d1c23a3ad6a8338bfe4a9c6
SHA1

b02dc10c8cfde967f621ee490ec8c0186d4d505e
SHA256

14fb8abaa99c742fa685871c39874348433888da5ce5cf6f4656e99ffe99497a
SHA512

b138e53c2f132071994b92c97d2ab3f6e7bee10d5794cf2550b6ab318c053b41b959a11e4da3d446075ab4bf96ebd3f55a3cba2457089c65b015d2684ac98931
SSDEEP

24576:xLRHAgfSVJbyeUyUCiWx6drqLwU6H/544tbp+pa40vK1f43kwBa:zvubRHnxm+F6f+4hQY40S1fD

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1836	3520	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\Anycast.exe
"C:\Users\Admin\AppData\Local\Temp\Anycast.exe"
1⤵
PID:3520
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 800
  2⤵
  - Program crash
  PID:1836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3520 -ip 3520
1⤵
PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3520-0-0x0000000000B30000-0x0000000000C9E000-memory.dmp

Filesize
1.4MB

Download
memory/3520-1-0x0000000074F30000-0x00000000756E0000-memory.dmp

Filesize
7.7MB

Download
memory/3520-2-0x0000000074F30000-0x00000000756E0000-memory.dmp

Filesize
7.7MB

Download