580a046ac391411ecae6e22a776fa4a1c596598964d21ee7153d64b110d8285d | Triage

Analysis

max time kernel
61s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27-04-2022 22:23

Sharing

Report Analysis Logs

General

Target

1596-54-0x0000000180000000-0x0000000180005000-memory.dll
Size

20KB
MD5

50522c9eb6c04ea0a35c1f189c290b79
SHA1

cedcf7f4b5a702b5149a4f111fa8df636053ea51
SHA256

580a046ac391411ecae6e22a776fa4a1c596598964d21ee7153d64b110d8285d
SHA512

8c7274dc790dbb03f0b442c874b2b995367b238bb77ac4b9350ba5e4d8c624a3f84600ebc29b62d4f1b2779dfaec853a968e5c23131cfdb8d864264055d23a06

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1332 3388 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1596-54-0x0000000180000000-0x0000000180005000-memory.dll,#1
1⤵
PID:3388

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3388 -s 224
2⤵
- Program crash
PID:1332

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 452 -p 3388 -ip 3388
1⤵
PID:1220

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...