9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66 | Triage

Analysis

max time kernel
103s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 23:58

Sharing

Report Analysis Logs

General

Target

9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66.exe
Size

554KB
MD5

4451a75a1f61e9aed428c7cc56455342
SHA1

319a73acaaba48a07284192fb28ad047bf69aaec
SHA256

9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66
SHA512

28c66da46d0ad0909085860a11e0a8f8e701fb78806623f240b221ca6ac2ec0782fdae266d021a73b4336a3d23d335589f3d8bef9d9f46bd98da42dc2901c9b5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2888 1180 WerFault.exe 9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66.exe

C:\Users\Admin\AppData\Local\Temp\9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66.exe
"C:\Users\Admin\AppData\Local\Temp\9f270cd7efc4844235a0c150a10f1b7d996e6449ba562940b985a3888725bb66.exe"
1⤵
PID:1180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1180 -s 296
2⤵
- Program crash
PID:2888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1180 -ip 1180
1⤵
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...