22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4 | Triage

Analysis

max time kernel
175s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12-06-2022 03:13

Sharing

Report Analysis Logs

General

Target

22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4.exe
Size

144KB
MD5

c12e700d6ca91b4c6f0b22bf4c52cda4
SHA1

64a7fa8f758eff451d91e929433fea673bafc66c
SHA256

22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4
SHA512

63373276bd8c728bfd95b7e55466d86030cba20bdd3c3df4c6543eaeb5400ed58ca05acef55e35fb77ddff67743afe22c504859799cceab7546e014a45d63183

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2496 2928 WerFault.exe 22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4.exe

C:\Users\Admin\AppData\Local\Temp\22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4.exe
"C:\Users\Admin\AppData\Local\Temp\22f9489afa895e02430f1bc86b065b564cd203c03aeaa4eb545f9628edde70b4.exe"
1⤵
PID:2928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2928 -s 236
2⤵
- Program crash
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2928 -ip 2928
1⤵
PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...