78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51 | Triage

Analysis

max time kernel
148s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 22:18

Sharing

Report Analysis Logs

General

Target

78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51.exe
Size

554KB
MD5

9038c0bfcb41767a7b8d1a46652d53e2
SHA1

372dea083bcbbe7f494992f92b5559cf2dab11c7
SHA256

78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51
SHA512

66c153d4e7de01de62775eb57f839f72bb185cb76e82cc12ff875287232fb8d9798bef909d94f10e43f766c0317988a98aa03ff7444b1ba97a5aeebe0858aa3d

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3292 380 WerFault.exe 78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51.exe

C:\Users\Admin\AppData\Local\Temp\78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51.exe
"C:\Users\Admin\AppData\Local\Temp\78b55ce394011b701be630417507f517df542361758ca2ab4c135023e2566c51.exe"
1⤵
PID:380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 380 -s 284
2⤵
- Program crash
PID:3292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 380 -ip 380
1⤵
PID:4800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...