a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64 | Triage

Analysis

max time kernel
118s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
21-05-2022 00:46

Sharing

Report Analysis Logs

General

Target

a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64.exe
Size

554KB
MD5

6359a6e05434a09f9cdfac39c7a8e070
SHA1

adbb3616b04e52e95eb5628193ef6f544e60c830
SHA256

a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64
SHA512

474aa3e2f8bfd35b3870ed95fbd84a3cf779317ad16e0eeced2b857a3b79f1d62c2d98d3fcb0f7fa5342f4ccf865115065380fe789fae49a33e9afc615c0e0eb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2272 4792 WerFault.exe a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64.exe

C:\Users\Admin\AppData\Local\Temp\a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64.exe
"C:\Users\Admin\AppData\Local\Temp\a941b94ee56c5ac8a373463410c14e1e56d118662bfc743cd310c0c28c529e64.exe"
1⤵
PID:4792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4792 -s 284
2⤵
- Program crash
PID:2272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4792 -ip 4792
1⤵
PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...