41866a3ffb0d8f3956ace918c38d92bfe557d09381b48fbcbac41cbab6dff5a3 | Triage

Analysis

max time kernel
159s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
16-03-2022 09:27

Sharing

Report Analysis Logs

General

Target

41866a3ffb0d8f3956ace918c38d92bfe557d09381b48fbcbac41cbab6dff5a3.dll
Size

255KB
MD5

fd97b2e9bddff182dd7cd502918a99cb
SHA1

fc271ed8e331551df25665194358940af0fc75a3
SHA256

41866a3ffb0d8f3956ace918c38d92bfe557d09381b48fbcbac41cbab6dff5a3
SHA512

1db28419320aa668a9a0e353d74f6a32a868720775d598e69667d8554adcb59d19d83e02cd177ebae460a03c6ab145690a32798c8031f705b955e3cbdc82441f

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4548 3648 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\41866a3ffb0d8f3956ace918c38d92bfe557d09381b48fbcbac41cbab6dff5a3.dll,#1
1⤵
PID:3648

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3648 -s 360
2⤵
- Program crash
PID:4548

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 484 -p 3648 -ip 3648
1⤵
PID:4896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...