3a081d09ca5b24102381a9ba85edae465c08310fcb9ba4be3b938692aff2f998 | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
21-04-2024 11:46

Sharing

Report Analysis Logs

General

Target

Lskj.PubPrint.exe
Size

170KB
MD5

3f633064e29859707cbae6648ff14264
SHA1

b2656bf393b76c80e0d5e16f242e203370c3fa4f
SHA256

3a081d09ca5b24102381a9ba85edae465c08310fcb9ba4be3b938692aff2f998
SHA512

05cfdd8f08d411438150f380f19430796d354fe9f1b91c40d74fe2569b8211754494f32027fe738169e9bd4d25b64c9163cc3bd0ac95c6c8fc28bda66ef40c50
SSDEEP

768:+7dNCkn0feEZlPUYthmQtM3csiD52OZRt96a2AOZRt96a2I:7k0feEZlPTO93cD3z6a2Z3z6a2I

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1272	400	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\Lskj.PubPrint.exe
"C:\Users\Admin\AppData\Local\Temp\Lskj.PubPrint.exe"
1⤵
PID:400
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 824
  2⤵
  - Program crash
  PID:1272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 400 -ip 400
1⤵
PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/400-0-0x00000000009C0000-0x00000000009F0000-memory.dmp

Filesize
192KB

Download
memory/400-1-0x0000000074690000-0x0000000074E40000-memory.dmp

Filesize
7.7MB

Download
memory/400-2-0x0000000005990000-0x0000000005F34000-memory.dmp

Filesize
5.6MB

Download
memory/400-3-0x0000000074690000-0x0000000074E40000-memory.dmp

Filesize
7.7MB

Download