70ea296a45426dbd90e8bc36d93282658f2d43acaf196fa05c48d3cc47fb3df1 | Triage™

Analysis

max time kernel
61s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
06/05/2022, 08:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1052-54-0x0000000000400000-0x000000000043D000-memory.exe
Size 244KB
Sample220506-j89bpscchn
SHA256 70ea296a45426dbd90e8bc36d93282658f2d43acaf196fa05c48d3cc47fb3df1
MD5 4073938ac110936dcb4cbe395a1effc1
SHA1 d9e7ecfb79671e518a321a5a7cda6e9737e5c06f
SHA512 dbf521b70297229fc0827255bf627986bf4f6e8b9c218880aef7952b32b6f5d5c96eef06bdea3eabfd9d8a2d2d38a4938e25ae195c67a6ac1eb0b5e2eb2c7afc
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1900	3288	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1052-54-0x0000000000400000-0x000000000043D000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1052-54-0x0000000000400000-0x000000000043D000-memory.exe"
1⤵
PID:3288
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3288 -s 216
  2⤵
  - Program crash
  PID:1900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3288 -ip 3288
1⤵
PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3288-130-0x0000000000400000-0x000000000043D000-memory.dmp

Download