1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed | Triage

Analysis

max time kernel
136s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-06-2022 03:16

Sharing

Report Analysis Logs

General

Target

1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed.exe
Size

143KB
MD5

060bd7824d33fece88d0b30173fa9552
SHA1

79b6fc5843fa02d997733389cee31708cc709d34
SHA256

1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed
SHA512

95cf4e435b9085b1ebf346c9c302e8b418113a737fb5976f3767b21e25a6070d8ee4ecbb9a13bc4428cac2c062518f1f38a7a824cc7b1c4d89dad462e9a749e6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4484 4024 WerFault.exe 1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed.exe

C:\Users\Admin\AppData\Local\Temp\1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed.exe
"C:\Users\Admin\AppData\Local\Temp\1d8bdb66f386e4a13eccbd5bd5d4a006da0b24350792b652767bf71499e3caed.exe"
1⤵
PID:4024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4024 -s 588
2⤵
- Program crash
PID:4484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 4024 -ip 4024
1⤵
PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4024-130-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download
memory/4024-131-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download