0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd | Triage

Analysis

max time kernel
91s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
30-05-2022 14:50

Sharing

Report Analysis Logs

General

Target

0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd.exe
Size

556KB
MD5

7448083f6dc37c6e62306659a07809db
SHA1

47772da494cfbcf9f149c0974495625e0c69a85a
SHA256

0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd
SHA512

429d31f9f0944b1e47e4cf3025392eabd35d956ccf274381c170b84f6f20a1f7ca74910a2e2ac190bd78c28616af7f5bb24f4dc4ae7aa1a298e33725d3e699bd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3156 1620 WerFault.exe 0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd.exe

C:\Users\Admin\AppData\Local\Temp\0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd.exe
"C:\Users\Admin\AppData\Local\Temp\0a95cea2b802f87bea44152ec4cc0a2635d5c97bb419a4742420b1f9b5d13fbd.exe"
1⤵
PID:1620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1620 -s 468
2⤵
- Program crash
PID:3156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1620 -ip 1620
1⤵
PID:5052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...