f40aeecb9e026460c303725c53f42604851d13f70307e6aeb2720b2d42afdc83 | Triage™

Analysis

max time kernel
125s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
06/05/2022, 08:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
388-54-0x0000000000400000-0x000000000043D000-memory.exe
Size 244KB
Sample220506-j76jescchm
SHA256 f40aeecb9e026460c303725c53f42604851d13f70307e6aeb2720b2d42afdc83
MD5 229a516d27361a3a72b8b25a976fc72e
SHA1 57be317577f8abaf5be98fc980eb0f7b78947676
SHA512 8998610a087a6126e3c0eaced2d1865cba0fdd0b5612f1762f1859372a8f5e6f054860554026bc30d55d09170bf7bb4e9667fc69efb7ff98e12e7a2ac5ce2e5f
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5096	2188	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\388-54-0x0000000000400000-0x000000000043D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\388-54-0x0000000000400000-0x000000000043D000-memory.exe"
1⤵
PID:2188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 192
  2⤵
  - Program crash
  PID:5096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2188 -ip 2188
1⤵
PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2188-130-0x0000000000400000-0x000000000043D000-memory.dmp

Download