961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b | Triage

Resubmissions

16-03-2024 07:36

240316-jfcf9sge49 3

16-03-2024 07:30

240316-jb7fvaee8t 3

Analysis

max time kernel
77s
max time network
79s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
16-03-2024 07:36

Sharing

Report Analysis Logs

General

Target

audiodg.exe
Size

422KB
MD5

14da837bf1a2a4ac419fc317503a942a
SHA1

587540bbe0d5d4551812c7fc97a38c8bf3b6c73e
SHA256

961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b
SHA512

f7c3e984f6bd49163670172d792bf0f5409f341d640bc0f147e88b402b72213cadc684941893ba534d2ad7196932f2faae3eeb40e7b9f0f6492da7bbe5444568
SSDEEP

6144:0X8UsUWIMr0Cbtqiwi3rJeB7u3PPwK1uliRMW2yAL1ZAuwn9:0X8Uf9HYfeo1ula2yAHwn

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
3180	4364	WerFault.exe	74

C:\Users\Admin\AppData\Local\Temp\audiodg.exe
"C:\Users\Admin\AppData\Local\Temp\audiodg.exe"
1⤵
PID:4364
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4364 -s 252
  2⤵
  - Program crash
  PID:3180

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4364-1-0x00000000006A0000-0x00000000007A0000-memory.dmp

Filesize
1024KB

Download
memory/4364-2-0x0000000000600000-0x0000000000643000-memory.dmp

Filesize
268KB

Download
memory/4364-3-0x0000000000400000-0x00000000004A9000-memory.dmp

Filesize
676KB

Download