6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964 | Triage

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-05-2022 18:32

Sharing

Report Analysis Logs

General

Target

6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964.exe
Size

72KB
MD5

2b8bc7d2c08fe87af682d4c0685cfce0
SHA1

c4ea61f643e26af344fb3466fdefae79fc72bd21
SHA256

6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964
SHA512

5a614a246c3e64b72af8028b7f7c2322f0635339abe7dedb31707c70d012d6df1a3e16f73e2bb347872909bc17928f74e22a3f6e4c19a9cb138f76c32e2227d0

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
4868	2820	WerFault.exe	6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964.exe
2084	2820	WerFault.exe	6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964.exe

C:\Users\Admin\AppData\Local\Temp\6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964.exe
"C:\Users\Admin\AppData\Local\Temp\6b6e26f45afd287f7e04072a30268891bd88a58c114e780fdcc9ab3be3288964.exe"
1⤵
PID:2820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2820 -s 260
2⤵
- Program crash
PID:4868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2820 -s 280
2⤵
- Program crash
PID:2084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2820 -ip 2820
1⤵
PID:3456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2820 -ip 2820
1⤵
PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...