ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9 | Triage

Analysis

max time kernel
145s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
21-05-2022 00:30

Sharing

Report Analysis Logs

General

Target

ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9.exe
Size

554KB
MD5

eae7974d820bd517495222b9a616a5c5
SHA1

ed1344541be0cce3e93177ac577f56fa0b06b9f4
SHA256

ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9
SHA512

2cc45bdb0b359d65246b731f9b009de68c625fc667bcd5f19d8e5846a7b627af65cb78665f86d9913f398cf734fe00a65480612b4d3c083f6d661434f581c679

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4136 4132 WerFault.exe ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9.exe

C:\Users\Admin\AppData\Local\Temp\ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9.exe
"C:\Users\Admin\AppData\Local\Temp\ae25dc288f5ef1ecfe4f7d6728a1814020813d2958434a06011778c206f575c9.exe"
1⤵
PID:4132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4132 -s 284
2⤵
- Program crash
PID:4136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4132 -ip 4132
1⤵
PID:4256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...