1295a45f74431767419c5b594a416622726105a22deacb5fc039270d8e42523b | Triage

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
19-04-2022 03:47

Sharing

Report Analysis Logs

General

Target

3104c4cd670651acb89456b10768dfd39896e1da2a3eda435b8dd25a145ff397.dll
Size

63KB
MD5

49ac04255d0a5adf38c6eaf73a631f7e
SHA1

b61a831329408f0d376b89edf855534f88ff4a33
SHA256

3104c4cd670651acb89456b10768dfd39896e1da2a3eda435b8dd25a145ff397
SHA512

7fe0985ecf78b3109cfe6a5f582bced9f7f64ce4fde08b4ca61d68afbbd10ac675cd7f79caf23f287f8ec1701c64b5fae0e84de7b38123c702889aed7e229bd7

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3132 3056 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3104c4cd670651acb89456b10768dfd39896e1da2a3eda435b8dd25a145ff397.dll,#1
1⤵
PID:3056

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3056 -s 224
2⤵
- Program crash
PID:3132

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 3056 -ip 3056
1⤵
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...