1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209 | Triage

Analysis

max time kernel
80s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-06-2022 17:10

Sharing

Report Analysis Logs

General

Target

1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209.exe
Size

71KB
MD5

1bf043d5cd96e5ccd5a51549c7834910
SHA1

9fe6cb9aeeccdd2f50e2377d4b5b0892b60f20b5
SHA256

1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209
SHA512

e9c82bea0ea322e5ace5871184cde13a6dfc9c84a42e177de11706dc70fab05322d4621b42f5267b39a4e063875ea413d3ee9692372c44fad39ea59de57361c2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1364 2324 WerFault.exe 1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209.exe

C:\Users\Admin\AppData\Local\Temp\1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209.exe
"C:\Users\Admin\AppData\Local\Temp\1bebf54ad8b7312ac20c319125bbb3e67cd5ec1815c2e5ce945f0232ffd13209.exe"
1⤵
PID:2324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2324 -s 464
2⤵
- Program crash
PID:1364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2324 -ip 2324
1⤵
PID:1360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...