8df6d0e3f95fb3f04f6316d2dbeb59ee9a20e2ff9c91953fab95b6f11b968bba | Triage™

Analysis

max time kernel
113s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-en-20220112
submitted
09/03/2022, 20:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
474531d62e7bc13f6b86f2e8dc6c96e8.exe
Size 579KB
Sample220309-yz29csbfe8
SHA256 8df6d0e3f95fb3f04f6316d2dbeb59ee9a20e2ff9c91953fab95b6f11b968bba
MD5 474531d62e7bc13f6b86f2e8dc6c96e8
SHA1 080d5cb99bb704ceddc3a480e714a7ad6e6cd646
SHA512 7d9f56a52cad768f0ce41c621002bec1be8469505aa15de564720e634ac5d4aee3800589c05ed16476e5173552db880ac1b31a6ce4d1e7eef9ff136ebeba5784
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3724	3064	WerFault.exe	54
4080	3064	WerFault.exe	54

C:\Users\Admin\AppData\Local\Temp\474531d62e7bc13f6b86f2e8dc6c96e8.exe
"C:\Users\Admin\AppData\Local\Temp\474531d62e7bc13f6b86f2e8dc6c96e8.exe"
1⤵
PID:3064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 468
  2⤵
  - Program crash
  PID:3724
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 508
  2⤵
  - Program crash
  PID:4080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3064 -ip 3064
1⤵
PID:3624

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3064 -ip 3064
1⤵
PID:4036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3064-130-0x0000000002300000-0x0000000002360000-memory.dmp

Download