0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f | Triage

Analysis

max time kernel
107s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25-05-2022 00:26

Sharing

Report Analysis Logs

General

Target

0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe
Size

2.1MB
MD5

87fef0f85c5c16b33a18c2a1460dd705
SHA1

7cdd664980f3bf24cf01be79e66ef51dd047bf13
SHA256

0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f
SHA512

e3f67facc7ac3c7e00ff72e28d3243f4ee293de4fe3c220f19c8bff7f1be69ae7b575dda75a0646d1a48d40d986e966922472ea5a9ba3edea399803be9541e3c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5080 4512 WerFault.exe 0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe

C:\Users\Admin\AppData\Local\Temp\0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe
"C:\Users\Admin\AppData\Local\Temp\0ee051075719911f36a195e8a029d514b370f8f2f1276bd41ffe9e3e7c1da35f.exe"
1⤵
PID:4512

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 228
2⤵
- Program crash
PID:5080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4512 -ip 4512
1⤵
PID:4520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4512-130-0x0000000000C10000-0x0000000000E12000-memory.dmp

Filesize
2.0MB

Download