299146e2c828679ea8ca6746ec2bc6e575884598759fcfe94cad78b52bc20b6e | Triage

Analysis

max time kernel
127s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
31-05-2022 07:47

Sharing

Report Analysis Logs

General

Target

1980-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

c718e0ad9d1147eb4ed60ae4eaadf996
SHA1

51402df41754714339b6f1434ab664ee94278284
SHA256

299146e2c828679ea8ca6746ec2bc6e575884598759fcfe94cad78b52bc20b6e
SHA512

b79f19890b1e8a64bc266e715bef799b591727c92b410cff67ef7a76aec0b9e0ecc73aeabf2b39c68302e3cb6542e6dfa21abab713b971bdea360eeee1b0904e

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4036 3456 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1980-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:3456

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3456 -s 244
2⤵
- Program crash
PID:4036

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 208 -p 3456 -ip 3456
1⤵
PID:4560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...