a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a | Triage

Analysis

max time kernel
161s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 23:52

Sharing

Report Analysis Logs

General

Target

a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a.exe
Size

554KB
MD5

b2deb3fa1acb774a1e5b17013d474d71
SHA1

e32774f940c4e8bdb19e0d33689bf4f56ab90895
SHA256

a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a
SHA512

913fc4b339ac0af4c89c3ad2b0af2ef29f245e91befff960bd3b78da9071c8c8457ef1ace01d91e0c2f58bacbd87b7b2f0734c86cd27156ecd837bce035aec8b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

444 2824 WerFault.exe a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a.exe

C:\Users\Admin\AppData\Local\Temp\a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a.exe
"C:\Users\Admin\AppData\Local\Temp\a898a3c616fab1e3c8f05eacf9ba459af21aefb63937cfc10778e77aaa375b3a.exe"
1⤵
PID:2824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2824 -s 284
  2⤵
  - Program crash
  PID:444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2824 -ip 2824
1⤵
PID:1476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads