b1a17ddd1eb03c2b95aa8f911f317ea0d7f4e89e7f4209242fc720c5a9e6d399 | Triage™

Analysis

max time kernel
153s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
22/03/2022, 05:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
44958191.exe
Size 922KB
Sample220322-ft93xaagfk
SHA256 b1a17ddd1eb03c2b95aa8f911f317ea0d7f4e89e7f4209242fc720c5a9e6d399
MD5 93093e91c226fd7963a73f47f51f112c
SHA1 689341af1f550507170ae15548899eb8c591b5ae
SHA512 5be5e795baa458c43fb75626af7a5de2fd392af786fd069f6d0d3cf945160f2de67618ad9d0e2ad2b0a1dc2fb7df9aa3d8e8af86ebb1da5ddc47f46b77ce26ca
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1916	1636	WerFault.exe	83
444	1636	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\44958191.exe
"C:\Users\Admin\AppData\Local\Temp\44958191.exe"
1⤵
PID:1636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1636 -s 436
  2⤵
  - Program crash
  PID:1916
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1636 -s 444
  2⤵
  - Program crash
  PID:444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1636 -ip 1636
1⤵
PID:3192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1636 -ip 1636
1⤵
PID:224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1636-134-0x00000000023E0000-0x0000000002440000-memory.dmp

Download