5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597 | Triage

Resubmissions

02-06-2022 17:00

220602-vh5rdaghd5 10

12-05-2022 11:15

220512-ncjtdscdb7 3

Analysis

max time kernel
194s
max time network
233s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12-05-2022 11:15

Sharing

Report Analysis Logs

General

Target

5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe
Size

9.2MB
MD5

0ad93a96179c6fbcec12a5849ffbc5bb
SHA1

c479683fde7a6737a6f7d72a043167f3a42296e3
SHA256

5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597
SHA512

3d7280919156881a7e4811f5978d080e910203704367869a97632c89e79df2e572c7bd4738ca660a42b691461bf7f6b0b37c103b84f161cccf8d30737da70fa3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

400 4212 WerFault.exe 5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe

C:\Users\Admin\AppData\Local\Temp\5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe
"C:\Users\Admin\AppData\Local\Temp\5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe"
1⤵
PID:4212

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4212 -s 144
2⤵
- Program crash
PID:400

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 420 -p 4212 -ip 4212
1⤵
PID:4704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...