9c722efda237af4e856b06657c20ad677d6c75ea33a033e28fa3f522039b5eae

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22-07-2024 14:25

Target

SheetRat/Confused/Server.exe
Size

1.8MB
MD5

2f4953747860b6b9f5e2d281ad7b33ed
SHA1

b3c494f18efc33201bfeb70c46a20305e9e6a4c1
SHA256

b497e24534343529d5393ebdbb2d9f7418ee984621a1ac17c61f6b69a19ea548
SHA512

e64337f8cb3491b0962c9caa6a44fb6dbeb4d439b1ea9959475b85244537ada732a894199c77f56c92fa28f676ffac371c84769acdcac7400493f9042710c765
SSDEEP

24576:IpU3em+XAPv+yqIflXp8QuPPWijaVjZ3XNS/c6vRpoEosA7iNP:HL+pynt5eFWVjZHN8Tis4iNP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4648	2224	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\SheetRat\Confused\Server.exe
"C:\Users\Admin\AppData\Local\Temp\SheetRat\Confused\Server.exe"
1⤵
PID:2224
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 896
  2⤵
  - Program crash
  PID:4648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2224 -ip 2224
1⤵
PID:2724

memory/2224-0-0x000000007509E000-0x000000007509F000-memory.dmp

Filesize
4KB

Download
memory/2224-1-0x00000000007F0000-0x00000000009D2000-memory.dmp

Filesize
1.9MB

Download
memory/2224-2-0x0000000007830000-0x00000000078EA000-memory.dmp

Filesize
744KB

Download
memory/2224-3-0x0000000075090000-0x0000000075840000-memory.dmp

Filesize
7.7MB

Download
memory/2224-4-0x0000000075090000-0x0000000075840000-memory.dmp

Filesize
7.7MB

Download