1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b | Triage

Analysis

max time kernel
94s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-06-2022 14:09

Sharing

Report Analysis Logs

General

Target

1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b.exe
Size

370KB
MD5

57b33c329990ba3f266fb59ef6468568
SHA1

fc73e1a2aa3124e2924f62d09db42e10614d928a
SHA256

1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b
SHA512

ad8f3c76e9199a0d3b408426acc9163ce278ab11d951d3de7dd69b4ea54fd21a9ec37f65c16e70bfd440420a7e74f8ee55d9a30d6fa847d5af1dfccd82186f3b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1344 2756 WerFault.exe 1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b.exe

C:\Users\Admin\AppData\Local\Temp\1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b.exe
"C:\Users\Admin\AppData\Local\Temp\1cc6588ef5bedc29ed497ebd5acd253af95f6938c1d731cab2ca5d910b00ec0b.exe"
1⤵
PID:2756
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2756 -s 448
  2⤵
  - Program crash
  PID:1344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2756 -ip 2756
1⤵
PID:8

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2756-130-0x00000000023A0000-0x00000000023CE000-memory.dmp

Filesize
184KB

Download