3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac | Triage

Analysis

max time kernel
53s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15-04-2022 02:24

Sharing

Report Analysis Logs

General

Target

3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac.exe
Size

614KB
MD5

9a719f35e752a002db73567eb97523c3
SHA1

4868b2d102350f9fb84d86d074a6bebe6ef4d89a
SHA256

3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac
SHA512

3c6a7620cc8ee08f99e88b9d0af538fc2c0b09f7b8fd74c36e5133c594f2322c4efb906722315f61857334a7fb64b6a6d8cd2ae6509697054dff9e7bb8c9ec7e

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3172 3580 WerFault.exe 3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac.exe

C:\Users\Admin\AppData\Local\Temp\3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac.exe
"C:\Users\Admin\AppData\Local\Temp\3bcca10cd0871761556c52fec9bebedcb855236d2d56496640d40ffce18c05ac.exe"
1⤵
PID:3580

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3580 -s 220
2⤵
- Program crash
PID:3172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3580 -ip 3580
1⤵
PID:3632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3580-130-0x0000000023000000-0x00000000230FB000-memory.dmp

Filesize
1004KB

Download