ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5 | Triage

Analysis

max time kernel
161s
max time network
196s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 22:52

Sharing

Report Analysis Logs

General

Target

ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5.exe
Size

554KB
MD5

5d5a21b34a60312dd1b185c7c3ccc8ac
SHA1

bf9d372b7dc50807b9dddc69aa1c3d4c36d91ed3
SHA256

ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5
SHA512

d423e47189df4c837b4e28315bed2a7ece63b985f995db829dd0fff8e3ea76ecda5d08265b1aa1f91c6566905ad632f461a2076c92db2affb7be1204af57e83b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1896 3792 WerFault.exe ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5.exe

C:\Users\Admin\AppData\Local\Temp\ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5.exe
"C:\Users\Admin\AppData\Local\Temp\ada5bc7937720a985b47a2e1ec53034b0f6d37ea0d5c01d551d871980804bce5.exe"
1⤵
PID:3792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3792 -s 284
2⤵
- Program crash
PID:1896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3792 -ip 3792
1⤵
PID:1876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...