392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78 | Triage™

Analysis

max time kernel
91s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
25/06/2022, 17:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78.exe
Size 723KB
Sample220625-v4d6jsfgc2
SHA256 392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78
MD5 58c57f0bc4267e4670eb8957a92bbff2
SHA1 f938c14e158f61f4f42f66806383cd4ccf0bd88a
SHA512 6fbc1d37e07eb9ac750c4c1c3f7f0f186bef32c758e0c571eb04772a63dcf7f8ee36b2cda2ae6c4cd180f9e2e1e226fb7c4c498b4b14c393277a89779570521e
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1908	4068	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78.exe
"C:\Users\Admin\AppData\Local\Temp\392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78.exe"
1⤵
PID:4068
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 264
  2⤵
  - Program crash
  PID:1908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4068 -ip 4068
1⤵
PID:3828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4068-133-0x00000000021A0000-0x0000000002233000-memory.dmp

Download