22968a18be6b3a89a6e946ac43c3d3f26ffb80d35cbbfa43c51104bb8a280697 | Triage™

Analysis

max time kernel
91s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12/06/2022, 04:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
22968a18be6b3a89a6e946ac43c3d3f26ffb80d35cbbfa43c51104bb8a280697.exe
Size 598KB
Sample220612-fbzt8abab2
SHA256 22968a18be6b3a89a6e946ac43c3d3f26ffb80d35cbbfa43c51104bb8a280697
MD5 7243a968f1ed3d85b2bde6f4eac5d8ce
SHA1 a87fc38375f27e9d0c8b89c4863b8a5ee3584e69
SHA512 3b133447217b1fe4be8833f1028d147ca8ee4980031c3dc51c94d69dfc2cafd31bc5ad5b59149b92238eef802aeb2ce3a478d2c2e4450ad7e42f884c09412590
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1212	2476	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\22968a18be6b3a89a6e946ac43c3d3f26ffb80d35cbbfa43c51104bb8a280697.exe
"C:\Users\Admin\AppData\Local\Temp\22968a18be6b3a89a6e946ac43c3d3f26ffb80d35cbbfa43c51104bb8a280697.exe"
1⤵
PID:2476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2476 -s 228
  2⤵
  - Program crash
  PID:1212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2476 -ip 2476
1⤵
PID:4468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2476-130-0x00000000007B0000-0x0000000000831000-memory.dmp

Download