fb8eefbb37ac7128e2c50d69050129f3971f280104bbb66fed8f6c69c129e1b9 | Triage™

Analysis

max time kernel
142s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
05/03/2022, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
831bbd8461518993bde2c512023954bd.exe
Size 554KB
Sample220305-w1f2eaaefq
SHA256 fb8eefbb37ac7128e2c50d69050129f3971f280104bbb66fed8f6c69c129e1b9
MD5 831bbd8461518993bde2c512023954bd
SHA1 8e6e4c45c28d23fc91bd24c3a7aefa59766639da
SHA512 bdc7e2ca64aac8f32a1dd051938c73a78ec257a1e2856c6b36ef55150b2b8c55b01da3a8c11101d286e17dd25a4441c37799be8de5ca5e48438041344b7e2fed
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3268	2848	WerFault.exe	79
3384	2848	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\831bbd8461518993bde2c512023954bd.exe
"C:\Users\Admin\AppData\Local\Temp\831bbd8461518993bde2c512023954bd.exe"
1⤵
PID:2848
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2848 -s 432
  2⤵
  - Program crash
  PID:3268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2848 -s 440
  2⤵
  - Program crash
  PID:3384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2848 -ip 2848
1⤵
PID:2500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 2848 -ip 2848
1⤵
PID:4240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2848-130-0x0000000002340000-0x00000000023A0000-memory.dmp

Download