970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc | Triage

Analysis

max time kernel
139s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-05-2022 18:11

Sharing

Report Analysis Logs

General

Target

970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc.exe
Size

110KB
MD5

5fc8c856137788888d5973ea28a365f2
SHA1

a892836e1bf5c017d468e117b24ea67fcff533c4
SHA256

970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc
SHA512

6fe74d22d5ef00a4c6834d523719e93d9df9cc1962040142fc435b84d132ad3477e757dd7d5c4aa306290fe199b95badc927dccad12212adc08215c5f4fa5968

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4516 4456 WerFault.exe 970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc.exe

C:\Users\Admin\AppData\Local\Temp\970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc.exe
"C:\Users\Admin\AppData\Local\Temp\970424e1fe4ab620e04efaf8deddd7d48a81cf41e68d2ada8d8775cf624c76bc.exe"
1⤵
PID:4456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4456 -s 248
2⤵
- Program crash
PID:4516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4456 -ip 4456
1⤵
PID:3124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads