54ad90b2ab54e9171cf391f33bd7a39c0cbf6b12e83e5c2086c0bf7cf2e4f8c2 | Triage™

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
08/03/2022, 17:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d0132c6f04ef01423346f7b6247caac5.exe
Size 557KB
Sample220308-v9fasscgcp
SHA256 54ad90b2ab54e9171cf391f33bd7a39c0cbf6b12e83e5c2086c0bf7cf2e4f8c2
MD5 d0132c6f04ef01423346f7b6247caac5
SHA1 b2df11dd4cb1f1226bea72fafc2690434cddbb05
SHA512 fcfd6b7c717cfa075bf46e1108549a72b973abf683ef5e3a57f842609fed9b85324eb03c2cec3a5b4eb2c033eafd2569afc72bd8897e25ab0e1de4d8fdb24d10
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2712	1492	WerFault.exe	78
4444	1492	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\d0132c6f04ef01423346f7b6247caac5.exe
"C:\Users\Admin\AppData\Local\Temp\d0132c6f04ef01423346f7b6247caac5.exe"
1⤵
PID:1492
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1492 -s 432
  2⤵
  - Program crash
  PID:2712
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1492 -s 440
  2⤵
  - Program crash
  PID:4444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1492 -ip 1492
1⤵
PID:2380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1492 -ip 1492
1⤵
PID:3900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1492-130-0x0000000002330000-0x0000000002390000-memory.dmp

Download