725bef1d64e9cc823c94255323b5c9461929aec4721ca87de5ec8626ff7e112d | Triage

Analysis

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27-04-2022 19:36

Sharing

Report Analysis Logs

General

Target

1664-54-0x0000000000110000-0x0000000000147000-memory.dll
Size

220KB
MD5

fd272df98fe2ceec7a0d5d761572d7dc
SHA1

84c0d9faa87b3773a6d835257b09914b180e7a9b
SHA256

725bef1d64e9cc823c94255323b5c9461929aec4721ca87de5ec8626ff7e112d
SHA512

9261f3ea8d48eacd0de2128a9ab3346e7442b956b67b30ab623fbd990aca0a28cfb5adb67c1547763fdecc26248dff289903665210c696f22e0bdf57e650a155

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3832 4872 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1664-54-0x0000000000110000-0x0000000000147000-memory.dll,#1
1⤵
PID:4872

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4872 -s 224
2⤵
- Program crash
PID:3832

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 4872 -ip 4872
1⤵
PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads