0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
21-05-2022 00:18

Sharing

Report Analysis Logs

General

Target

0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e.exe
Size

72KB
MD5

e004294ff9e02ef42c0b8edd8ad13ecd
SHA1

949da6f3c5c54af57b948b68f99daf26ca294f6a
SHA256

0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e
SHA512

5ae44193c3a05d9400548e2bbc857e1d3ed9d0d7e4194d12db6e42b8338309bb82c89e162e0cad004ade5d6b0038256714190cdfd87fbc058a2ba0d9b514d3cf

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2496	2272	WerFault.exe	0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e.exe
5064	2272	WerFault.exe	0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e.exe

C:\Users\Admin\AppData\Local\Temp\0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e.exe
"C:\Users\Admin\AppData\Local\Temp\0965124f217915dcf3ddc49eac9cbf6abce632116b7eff2e8b3786b91cb2580e.exe"
1⤵
PID:2272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 260
2⤵
- Program crash
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 280
2⤵
- Program crash
PID:5064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2272 -ip 2272
1⤵
PID:2232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 2272 -ip 2272
1⤵
PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...