ed27c1ce4babc1aa83fb1ccaae9885ee1b93024e40d0a29969fcb50f04e242f7 | Triage

Analysis

max time kernel
129s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
21-03-2022 21:27

Sharing

Report Analysis Logs

General

Target

1992-55-0x0000000180000000-0x000000018000B000-memory.dll
Size

44KB
MD5

3c35116e283cab895242afb2adf6553e
SHA1

c8beb1102484c52d6dd881a033db6b0dc691afb8
SHA256

ed27c1ce4babc1aa83fb1ccaae9885ee1b93024e40d0a29969fcb50f04e242f7
SHA512

8f7a2a05dfcab87e2629e59375cd7dcbac53730edac9b85b1e4223b27eb1eb8d5ed721ef8d295cdfe7ec4dbb3749caceaa62f5dda94e420823dcef3a1b7e6705

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1780 1556 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1992-55-0x0000000180000000-0x000000018000B000-memory.dll,#1
1⤵
PID:1556

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1556 -s 244
2⤵
- Program crash
PID:1780

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 452 -p 1556 -ip 1556
1⤵
PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...