83bbe257a941929d611c6d1701dd61965d5409917f4210638ec74abc2a0b538f | Triage

Analysis

max time kernel
124s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
30-03-2022 11:40

Sharing

Report Analysis Logs

General

Target

1844-54-0x00000000003F0000-0x00000000003F9000-memory.exe
Size

36KB
MD5

7c6817ed9a85504960913dc46111df69
SHA1

124c700592f2152a8d5d1f913a3a185b8ad988d6
SHA256

83bbe257a941929d611c6d1701dd61965d5409917f4210638ec74abc2a0b538f
SHA512

372bd44ef917c1213bcfe991dbe81b726e5cfd31045ef81b69e956e78ac867c6f71dd1d22470239fe0826450b8ea4dba6d1bf5e776d2a75bf1e853862235e907

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1476 4332 WerFault.exe 1844-54-0x00000000003F0000-0x00000000003F9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1844-54-0x00000000003F0000-0x00000000003F9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1844-54-0x00000000003F0000-0x00000000003F9000-memory.exe"
1⤵
PID:4332

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4332 -s 144
2⤵
- Program crash
PID:1476

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4332 -ip 4332
1⤵
PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...