d73b7af1f21bfc7a968367f97b028194134b188d9ca2a7cdbbeafe7e8ba4127d | Triage

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220331-en
submitted
11-04-2022 13:24

Sharing

Report Analysis Logs

General

Target

756-54-0x0000000000100000-0x000000000010B000-memory.exe
Size

44KB
MD5

9ea033040a8b5fee692b189f2fcea60f
SHA1

ccfaaeffbee56cfe2c8e9b717be87e37b9cd266d
SHA256

d73b7af1f21bfc7a968367f97b028194134b188d9ca2a7cdbbeafe7e8ba4127d
SHA512

1c6a2459cb1e9b50de620a1df932a6aa83fc579d8b8e31328363c646247d15bab5cb4e9f503a91322e3dd2f7adb391fad2efa4bedec719c6309d0f01bc7b74e8

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1460 1868 WerFault.exe 756-54-0x0000000000100000-0x000000000010B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\756-54-0x0000000000100000-0x000000000010B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\756-54-0x0000000000100000-0x000000000010B000-memory.exe"
1⤵
PID:1868

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1868 -s 144
2⤵
- Program crash
PID:1460

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1868 -ip 1868
1⤵
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...