a5a95da2cc6c1c045b9162c62e79f215f5dc718026f4490059840e126f957879 | Triage™

Analysis

max time kernel
91s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08/06/2022, 17:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1244-58-0x0000000000400000-0x000000000040C000-memory.exe
Size 48KB
Sample220608-wfg3zaece3
SHA256 a5a95da2cc6c1c045b9162c62e79f215f5dc718026f4490059840e126f957879
MD5 ed59df8b328f9a46bc00f704954688e9
SHA1 d8512991bac00913dc3087a3762dd5df5d478c22
SHA512 d3a43a4e0f64188c529980e727a8ce0bac28aaa0c7ca66d0f9c8af26b5635f60deb220379e67aa1c293ada17327a7fd14f4a29c0c7f3a7f2a65eae8ea70f6db4
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4236	3948	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1244-58-0x0000000000400000-0x000000000040C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1244-58-0x0000000000400000-0x000000000040C000-memory.exe"
1⤵
PID:3948
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3948 -s 224
  2⤵
  - Program crash
  PID:4236

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3948 -ip 3948
1⤵
PID:4504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads