12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8 | Triage

Analysis

max time kernel
156s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 22:29

Sharing

Report Analysis Logs

General

Target

12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8.exe
Size

554KB
MD5

f915dd718743ef988fba719880e70ef3
SHA1

8a25b660c741ccf8a4d6389a16f491499411c953
SHA256

12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8
SHA512

f105f6b9a8ecd95b57b41eebfb5cd94ff13cf3653e424993da362d6db3a2c721e3d904df63184b51be96488d9c8e7dc98843c0c5daabf0058a52091531db230e

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4544 3316 WerFault.exe 12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8.exe

C:\Users\Admin\AppData\Local\Temp\12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8.exe
"C:\Users\Admin\AppData\Local\Temp\12ab1f1809440c6eab000ca0787ad606959cf58be492f068703d2cf38d13cbb8.exe"
1⤵
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 284
2⤵
- Program crash
PID:4544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3316 -ip 3316
1⤵
PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...