8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0 | Triage

Analysis

max time kernel
171s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25-06-2022 09:25

Sharing

Report Analysis Logs

General

Target

8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0.exe
Size

593KB
MD5

f202cde32eb67f9dcd34d25f99be1cb4
SHA1

c3b53ecdcac6d5017acb0785fd511d181b4adacf
SHA256

8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0
SHA512

173848fc11f7e098af391d5cc4a6aba92307fd3a6256b21163bdc3939420dccc2789295e9a03ed413e929c03227fd4a2a9fad6fba5a311d1288baf3bd9fa319b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4424 1960 WerFault.exe 8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0.exe

C:\Users\Admin\AppData\Local\Temp\8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0.exe
"C:\Users\Admin\AppData\Local\Temp\8049d19882d5cb78d42ba44c86873249cd73988dd9675670e38dc6bb8fd5ada0.exe"
1⤵
PID:1960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 8648
2⤵
- Program crash
PID:4424

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1960 -ip 1960
1⤵
PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1960-130-0x00000000000F0000-0x0000000000188000-memory.dmp

Filesize
608KB

Download
memory/1960-131-0x0000000002560000-0x0000000002563000-memory.dmp

Filesize
12KB

Download