dcc4e87f39108014864f82b22a34773dd6d7c9b0da4a32f6682e63b5d16e8066 | Triage™

Resubmissions

16/03/2022, 13:34

220316-qt931scdep3

16/03/2022, 13:30

220316-qr9pgaecf83

10/03/2022, 16:27

220310-tx6fsabhdr3

Analysis

max time kernel
136s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
10/03/2022, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
637d210df73ff5f59bb2453e0f29fd7d.exe
Size 557KB
Sample220310-tx6fsabhdr
SHA256 dcc4e87f39108014864f82b22a34773dd6d7c9b0da4a32f6682e63b5d16e8066
MD5 637d210df73ff5f59bb2453e0f29fd7d
SHA1 08b0b68987f4b73344b285e9feffef9ceeafa2f1
SHA512 1756395f39f6d8c7d52a7645ba9754d07c0642fb282abb89fc2de7c2e9e398a0dac9be803010bad38e078be6c634dbffcd80ec2a680b357bcd7390e0cfd804d3
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2772	1324	WerFault.exe	78
4212	1324	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\637d210df73ff5f59bb2453e0f29fd7d.exe
"C:\Users\Admin\AppData\Local\Temp\637d210df73ff5f59bb2453e0f29fd7d.exe"
1⤵
PID:1324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 424
  2⤵
  - Program crash
  PID:2772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 432
  2⤵
  - Program crash
  PID:4212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1324 -ip 1324
1⤵
PID:2532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1324 -ip 1324
1⤵
PID:3472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1324-130-0x0000000002360000-0x00000000023C0000-memory.dmp

Download