b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb | Triage

Analysis

max time kernel
141s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
21-05-2022 10:56

Sharing

Report Analysis Logs

General

Target

b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb.exe
Size

554KB
MD5

35ef3d04fc9440361c1d7c075c9aa3f8
SHA1

f4110a2517c36f4af887f4b852d93e755bc18e33
SHA256

b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb
SHA512

662cdaa3c9a26e4c020b6a25f7a5664c51c7e72a91ab8d4ffaa6890efeaba1930318646007e96f818e1323c13dfd66849c07c95cb4cbe3fd4133ad9fbc65572d

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4876 768 WerFault.exe b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb.exe

C:\Users\Admin\AppData\Local\Temp\b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb.exe
"C:\Users\Admin\AppData\Local\Temp\b73ad1034f549ee2133928c81ad1960e3378e21a6ab0c71fbc08ebb21c6681bb.exe"
1⤵
PID:768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 768 -s 284
2⤵
- Program crash
PID:4876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 768 -ip 768
1⤵
PID:3844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...