28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce | Triage

Analysis

max time kernel
67s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15-06-2022 16:12

Sharing

Report Analysis Logs

General

Target

28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce.exe
Size

770KB
MD5

8ac7c66efdeefceea010123faa515cdf
SHA1

961c26caade6bb374efb19319411f04183af2cb0
SHA256

28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce
SHA512

621d2229400f1900fa78852551b2447577d72b5fe482206b3a2c37c928c9db12057419fde4e5cf81e5deb086618d128b5db1dac7fb26b5fc44ab2765e508c798

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1600 3984 WerFault.exe 28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce.exe

C:\Users\Admin\AppData\Local\Temp\28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce.exe
"C:\Users\Admin\AppData\Local\Temp\28df46fe9876341394f8f0e4dcf17bd76f451ea8347104470acb59291f1735ce.exe"
1⤵
PID:3984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 548
2⤵
- Program crash
PID:1600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3984 -ip 3984
1⤵
PID:3096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...