17d01792e3da52e17e8045089e24f3c6f094ceace716cd540b6ba5c23ca71659 | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
19-05-2022 03:47

Sharing

Report Analysis Logs

General

Target

c29d8130e7e1644f97b8ef4e8bf34d56a19a7448aa4ca511d7438e034ba33d33.exe
Size

16KB
MD5

44c59a22023d86afade192a33fbcc86a
SHA1

0973ee68dcef515f301470601babb8da3dc77d01
SHA256

c29d8130e7e1644f97b8ef4e8bf34d56a19a7448aa4ca511d7438e034ba33d33
SHA512

2668102505eb68ba4b01b01ae248ac9fee473c265ac3475b2c433ceea78505bb0b57d9d9071e532df639e3ad3400b7a0873c3e12406c33045e1d1fca2f24d646

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1912 3136 WerFault.exe c29d8130e7e1644f97b8ef4e8bf34d56a19a7448aa4ca511d7438e034ba33d33.exe

C:\Users\Admin\AppData\Local\Temp\c29d8130e7e1644f97b8ef4e8bf34d56a19a7448aa4ca511d7438e034ba33d33.exe
"C:\Users\Admin\AppData\Local\Temp\c29d8130e7e1644f97b8ef4e8bf34d56a19a7448aa4ca511d7438e034ba33d33.exe"
1⤵
PID:3136

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3136 -s 220
2⤵
- Program crash
PID:1912

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 3136 -ip 3136
1⤵
PID:4636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k appmodel -p -s camsvc
1⤵
PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...