edbec486582012c387472ac887a87ada58bbab39f1cc0ddd48472a9732e7583d | Triage

Analysis

max time kernel
125s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220331-en
submitted
06-04-2022 16:27

Sharing

Report Analysis Logs

General

Target

2364-116-0x0000000140000000-0x000000014000B000-memory.exe
Size

44KB
MD5

cae35d83cdc433e488f56c5bd00b1e11
SHA1

c62f163732a0f201028422f137af190ff8a4106e
SHA256

edbec486582012c387472ac887a87ada58bbab39f1cc0ddd48472a9732e7583d
SHA512

a64bbef3c9ff070ecf79282c6c16e5749150bee7585c112e5b53ff4d4a9386f33f2a63814d00d3bd0e1d5105234220b51d04d405895fa9643a7c9d9aadbd95a4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4524 4396 WerFault.exe 2364-116-0x0000000140000000-0x000000014000B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2364-116-0x0000000140000000-0x000000014000B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2364-116-0x0000000140000000-0x000000014000B000-memory.exe"
1⤵
PID:4396

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4396 -s 144
2⤵
- Program crash
PID:4524

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4396 -ip 4396
1⤵
PID:3196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...