6ba3a5e55580eec1856d8eaedaa719b2a36f94cf3bae7902f97a9128983be85b | Triage

Analysis

max time kernel
143s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
23-05-2022 17:09

Sharing

Report Analysis Logs

General

Target

852-55-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

be759f3659ea88b9d7f6e17da001f76e
SHA1

b307af5db4ac78332e1ca7064aca41a6eb24eae5
SHA256

6ba3a5e55580eec1856d8eaedaa719b2a36f94cf3bae7902f97a9128983be85b
SHA512

5138fd5338487274da917846746aa1c5960622864e240ddd0bec00b6e1c30df6f076814cec7599603c0b5cc4f5a62b2977f8461091509eda144190c22aa9253d

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

828 4840 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\852-55-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4840

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4840 -s 240
2⤵
- Program crash
PID:828

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 4840 -ip 4840
1⤵
PID:4052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...