b5247dad960fec9ed904380c4abaecf20e02afcec42b84006925a6a95fbd493f | Triage

Analysis

max time kernel
127s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
29-03-2022 22:13

Sharing

Report Analysis Logs

General

Target

1808-54-0x0000000140000000-0x000000014000B000-memory.exe
Size

44KB
MD5

848739314c666862d05325c38225fe3e
SHA1

dde8fadcb768230518302ac923a8cfb8f6d615e3
SHA256

b5247dad960fec9ed904380c4abaecf20e02afcec42b84006925a6a95fbd493f
SHA512

6319d6a6aa8467aaff5e5569ecbb14ff5761499103c36b13b125ac1fd86602e131d14d27746f053a6bd480760cdf28f8dec52a70693fc9b559d30266751a7124

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1152 3292 WerFault.exe 1808-54-0x0000000140000000-0x000000014000B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1808-54-0x0000000140000000-0x000000014000B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1808-54-0x0000000140000000-0x000000014000B000-memory.exe"
1⤵
PID:3292

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3292 -s 144
2⤵
- Program crash
PID:1152

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 452 -p 3292 -ip 3292
1⤵
PID:3484

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...