b5b526b4b8c2d4396a91d7daf5f5fe804538c001087d8c4b32e01899b396b6b3 | Triage

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 05:09

Sharing

Report Analysis Logs

General

Target

vccorlib140.dll
Size

329KB
MD5

07907b0fe230247ded78493e97184f0a
SHA1

8fa0325c578dfa575e352499ed237cbcb7ee74aa
SHA256

9eb1ee3baef268410f3443a888a63de38fb3e47792108eaf5025684f8d308b88
SHA512

3c090aebaed23346172b47ac318d36785d577d980db6dcaca85dcceac209b8421488bbbfeaa2a25c2c0c1ba4ae00aa1174f3da75e2a9891aae5406d4363a256f

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2624 396 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vccorlib140.dll,#1
1⤵
PID:396

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 396 -s 344
2⤵
- Program crash
PID:2624

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 396 -ip 396
1⤵
PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...