483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94 | Triage

Analysis

max time kernel
158s
max time network
218s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25-06-2022 06:25

Sharing

Report Analysis Logs

General

Target

483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94.exe
Size

181KB
MD5

a39ff196c2185d099af2abf3d6bf0ab2
SHA1

8e4106195d6066207522d77aef9c1e40ad825690
SHA256

483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94
SHA512

64e937da94c01e18a641264166fa9a7f2f05366450376507af4f0e1bea5f7aeb8a62cecb2893c0418541c62a0e35be4dd41bee838c176819bed9bc7625190aa0

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2636 2508 WerFault.exe 483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94.exe

C:\Users\Admin\AppData\Local\Temp\483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94.exe
"C:\Users\Admin\AppData\Local\Temp\483736551cd9749b6aee08234815b1c4443ec1ba1b0066e24f377c192a2dac94.exe"
1⤵
PID:2508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2508 -s 244
2⤵
- Program crash
PID:2636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2508 -ip 2508
1⤵
PID:4180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...