2eaccf2ffad0c83282b940b5ed1e65f38acacc9e002b48e3bf4f852e1097232a | Triage

Resubmissions

05/02/2025, 08:55

250205-kvkxmayrcz 10

05/02/2025, 06:37

250205-hdsvsswldm 10

17/03/2024, 04:49

240317-ffz1saef65 10

Analysis

max time kernel
430s
max time network
445s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05/02/2025, 06:37

Sharing

Report Analysis Logs

General

Target

out.exe
Size

153KB
MD5

7711bcce494fc2053d74d5ae72c74973
SHA1

8cfcbd6e32f78c0ce8b98336be7d3402eaea59ae
SHA256

8480baa924171e02c61def06ae3e4192acc7c0c83eca6071ca4f735057cecd54
SHA512

4904eaf5d3849015caa690a88b6b886a0b74a6f8bc8d520940bf3ff6d3892ae83744445e3f9b00ce24a6c8ad70f4da1671fd48c20c2bb2dbe9a36c77356b9dec
SSDEEP

3072:Kd6gpEFonqvMYI5w8FEZO4kX3oJEiAwYh0qma05j0qZn:SpWYqvs+sfurYh0qmaMj5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2848	4736	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\out.exe
C:\Users\Admin\AppData\Local\Temp\out.exe dsrm -subtree -noprompt -c user"http://+:443"
1⤵
PID:4736
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4736 -s 188
  2⤵
  - Program crash
  PID:2848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4736 -ip 4736
1⤵
PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads