cbd602b0369f3026ac13ab6902ad682bc7480c0d1e5ac9da1e032dbec0a8b77c | Triage

Analysis

max time kernel
138s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
14-06-2022 12:52

Sharing

Report Analysis Logs

General

Target

1008-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

f99f3e8223f1882b5cc2736992b27a74
SHA1

f3f50bcf76b0e80206f4bdd323bc6380184f9ee7
SHA256

cbd602b0369f3026ac13ab6902ad682bc7480c0d1e5ac9da1e032dbec0a8b77c
SHA512

f8c731a16623fa2ef1e03771781c7f729a8d8024ca9e500129e3219f3fa39a7d25899c0c7b8204926b19845ecb85cbfa6b75a6e91e6a81b8c8bc345e68308386

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

724 2736 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1008-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:2736

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2736 -s 244
2⤵
- Program crash
PID:724

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 2736 -ip 2736
1⤵
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...