b5b526b4b8c2d4396a91d7daf5f5fe804538c001087d8c4b32e01899b396b6b3 | Triage

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 05:09

Sharing

Report Analysis Logs

General

Target

concrt140.dll
Size

309KB
MD5

f3c9f61b9e1b25c9de8d817d3d1c02d7
SHA1

dab244ac19c66bb5a7bae0aee6e3ea280c30f364
SHA256

1f072a6dc98cd882c542208e7a8fe4fbe5239781588f17c005a2607fdfe62d5d
SHA512

8a6cf1e91a15b5a1db52880258f3a39f6cc3bed72e79598f7a10661dd9ed28d369499f585225eb016a2f0b7eddade096ba80083db301b68deb173fadde3b9619

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1700 3564 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\concrt140.dll,#1
1⤵
PID:3564

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3564 -s 332
2⤵
- Program crash
PID:1700

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 3564 -ip 3564
1⤵
PID:828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...