b5b526b4b8c2d4396a91d7daf5f5fe804538c001087d8c4b32e01899b396b6b3 | Triage

Analysis

max time kernel
136s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 05:09

Sharing

Report Analysis Logs

General

Target

msvcp140.dll
Size

576KB
MD5

01b946a2edc5cc166de018dbb754b69c
SHA1

dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46
SHA256

88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
SHA512

65dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3044 4804 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\msvcp140.dll,#1
1⤵
PID:4804

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4804 -s 332
2⤵
- Program crash
PID:3044

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 432 -p 4804 -ip 4804
1⤵
PID:4924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...