c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689 | Triage

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 23:59

Sharing

Report Analysis Logs

General

Target

c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689.exe
Size

554KB
MD5

4f46d2cdc301f49467c127c86590605d
SHA1

0ba75a266db9818aa2d9c557b400c83c34e39cd9
SHA256

c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689
SHA512

d7bb4d71ff64a283f3262e7df53f0879bc7c3e72cd55ab09615da73a73614cc7d2f3f91918c4fede161db50fcdf4e984d96a94c50226baf8c0d970a7890e733c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4112 2496 WerFault.exe c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689.exe

C:\Users\Admin\AppData\Local\Temp\c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689.exe
"C:\Users\Admin\AppData\Local\Temp\c417e54393fc1fec30c21e58ff1850668daaf93803915fe7f9dc18debd86e689.exe"
1⤵
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 292
2⤵
- Program crash
PID:4112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2496 -ip 2496
1⤵
PID:4396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...