32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be | Triage

Analysis

max time kernel
147s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
20-06-2022 04:45

Sharing

Report Analysis Logs

General

Target

32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be.exe
Size

72KB
MD5

b0b1cd3310de6c5ce9bca55e538f3f71
SHA1

11b86d0893c67aa37c6d5d9c368a4729fc8920ea
SHA256

32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be
SHA512

7e1b9437e0026d3ac634515044363568c55a2fdb781eb2fd85b5dca6699e65aee050f1df230bd119987cd8bf66dfb2ead5a7267691e5c5aba81e74a415513531

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
3836	2916	WerFault.exe	32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be.exe
3984	2916	WerFault.exe	32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be.exe

C:\Users\Admin\AppData\Local\Temp\32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be.exe
"C:\Users\Admin\AppData\Local\Temp\32dddb4c75b68e538776dde936fa0810033170041f8136489d8690ccfc29a8be.exe"
1⤵
PID:2916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 260
2⤵
- Program crash
PID:3836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 268
2⤵
- Program crash
PID:3984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2916 -ip 2916
1⤵
PID:2776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 2916 -ip 2916
1⤵
PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...