4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2 | Triage

Analysis

max time kernel
139s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 22:22

Sharing

Report Analysis Logs

General

Target

4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2.exe
Size

554KB
MD5

599b93918efa98ba6cea5e14cc47fa80
SHA1

94c7c7c89be2e3c866b81fb352586a70f91414c3
SHA256

4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2
SHA512

d98fbee1d19c46aa8297065b2f7b4690033534d07deb156962f0d42b9d7ad20aca44a1fca1666fd624c2e5f3320e4ab891c519a6d1e057c89b4cd5afecd5279c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1836 4504 WerFault.exe 4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2.exe

C:\Users\Admin\AppData\Local\Temp\4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2.exe
"C:\Users\Admin\AppData\Local\Temp\4f8a51b563e832c4660a2e674580d91dc46294447f6971b9916285dab28bd4b2.exe"
1⤵
PID:4504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4504 -s 284
2⤵
- Program crash
PID:1836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4504 -ip 4504
1⤵
PID:2812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...