14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549 | Triage

Analysis

max time kernel
134s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
02-06-2022 18:14

Sharing

Report Analysis Logs

General

Target

14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549.exe
Size

507KB
MD5

acae0628b7df86f2257e76c064adc63c
SHA1

0ad10d85a70187745849d38551e6cb197f067d19
SHA256

14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549
SHA512

a81035177ebded54a1b54061f84da06fe42ee56fb2f07e0a1c7cc39eb109b83c1ef196034bba743b1eca47e7a6b78866327f5f3c5fbfd93c084735c7d8332027

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5004 4044 WerFault.exe 14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549.exe

C:\Users\Admin\AppData\Local\Temp\14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549.exe
"C:\Users\Admin\AppData\Local\Temp\14c677290ebe1bf2be247eb076e2a702d1bc713d6ae249b1f00c78762c8b6549.exe"
1⤵
PID:4044
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4044 -s 428
  2⤵
  - Program crash
  PID:5004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4044 -ip 4044
1⤵
PID:4612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4044-130-0x0000000002210000-0x000000000226B000-memory.dmp

Filesize
364KB

Download