62312c9fa7b562280153bc606e626813d4404c50e341df1f992c3a6f632c3561 | Triage

Analysis

max time kernel
133s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
23-03-2022 05:15

Sharing

Report Analysis Logs

General

Target

792-55-0x0000000180000000-0x000000018000B000-memory.dll
Size

44KB
MD5

cc244c3571088d70605452d5b3cdd99d
SHA1

059bc679eb79ef7224eb206da4ce1c8352f68fac
SHA256

62312c9fa7b562280153bc606e626813d4404c50e341df1f992c3a6f632c3561
SHA512

770d70d5975a49e07d29d9d9458e9ae72d5d3326216f5d15d0d0c953a39e45d9c310013e36ba488303f7d16e1153d8a5807d417ad5464bf40d9b7b396285e0f2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3560 1576 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\792-55-0x0000000180000000-0x000000018000B000-memory.dll,#1
1⤵
PID:1576

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1576 -s 244
2⤵
- Program crash
PID:3560

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1576 -ip 1576
1⤵
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...