961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b | Triage

Resubmissions

16-03-2024 16:02

240316-tg7znsec3v 3

16-03-2024 16:01

240316-tgeccsec2y 3

Analysis

max time kernel
91s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20231215-ja
resource tags

arch:x64arch:x86image:win10v2004-20231215-jalocale:ja-jpos:windows10-2004-x64systemwindows
submitted
16-03-2024 16:02

Sharing

Report Analysis Logs

General

Target

audiodg.exe
Size

422KB
MD5

14da837bf1a2a4ac419fc317503a942a
SHA1

587540bbe0d5d4551812c7fc97a38c8bf3b6c73e
SHA256

961432a0835bb2ab9c3b30e4aaead84eaeb84795e8af81c3ef0b004c81c97a7b
SHA512

f7c3e984f6bd49163670172d792bf0f5409f341d640bc0f147e88b402b72213cadc684941893ba534d2ad7196932f2faae3eeb40e7b9f0f6492da7bbe5444568
SSDEEP

6144:0X8UsUWIMr0Cbtqiwi3rJeB7u3PPwK1uliRMW2yAL1ZAuwn9:0X8Uf9HYfeo1ula2yAHwn

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5296 5344 WerFault.exe audiodg.exe

C:\Users\Admin\AppData\Local\Temp\audiodg.exe
"C:\Users\Admin\AppData\Local\Temp\audiodg.exe"
1⤵
PID:5344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5344 -s 268
2⤵
- Program crash
PID:5296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5344 -ip 5344
1⤵
PID:5892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5344-1-0x0000000000570000-0x0000000000670000-memory.dmp

Filesize
1024KB

Download
memory/5344-2-0x00000000020E0000-0x0000000002123000-memory.dmp

Filesize
268KB

Download
memory/5344-3-0x0000000000400000-0x00000000004A9000-memory.dmp

Filesize
676KB

Download