33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642 | Triage

Analysis

max time kernel
142s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-06-2022 02:29

Sharing

Report Analysis Logs

General

Target

33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642.exe
Size

990KB
MD5

2908e633ef1caa87c76d224dccca4273
SHA1

614e4fc794f18f541bf6ea1fcc2ba7d16fb6f6b8
SHA256

33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642
SHA512

597b05b132e1cf6547826072c07c7e79ea2ae69edd0d025fca654f0b352225133f34d920fa0fd8b44aff04c79a7264cc8864c5ab49534ba7d4c0fa64e51d0ad6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4352 60 WerFault.exe 33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642.exe

C:\Users\Admin\AppData\Local\Temp\33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642.exe
"C:\Users\Admin\AppData\Local\Temp\33698dda39e4e785fa22187b7db0d1b4f9fbaf924f06b045c6666c3ef1a2e642.exe"
1⤵
PID:60

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 60 -s 516
2⤵
- Program crash
PID:4352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 60 -ip 60
1⤵
PID:4744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...