5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597 | Triage

Resubmissions

02-06-2022 17:00

220602-vh5rdaghd5 10

12-05-2022 11:15

220512-ncjtdscdb7 3

Analysis

max time kernel
90s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
02-06-2022 17:00

Sharing

Report Analysis Logs

General

Target

5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe
Size

9.2MB
MD5

0ad93a96179c6fbcec12a5849ffbc5bb
SHA1

c479683fde7a6737a6f7d72a043167f3a42296e3
SHA256

5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597
SHA512

3d7280919156881a7e4811f5978d080e910203704367869a97632c89e79df2e572c7bd4738ca660a42b691461bf7f6b0b37c103b84f161cccf8d30737da70fa3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3180 3128 WerFault.exe 5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe

C:\Users\Admin\AppData\Local\Temp\5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe
"C:\Users\Admin\AppData\Local\Temp\5e6c5a9fda2d20125f6f24e37e8a217a39ff0a5cfddc07ddfdb18049d9ea4597.exe"
1⤵
PID:3128
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3128 -s 144
  2⤵
  - Program crash
  PID:3180

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 452 -p 3128 -ip 3128
1⤵
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads