3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d | Triage

Analysis

max time kernel
100s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
26-06-2022 03:42

Sharing

Report Analysis Logs

General

Target

3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d.exe
Size

175KB
MD5

5fa8ad9d232314d906437a9bcaa4c66a
SHA1

e7e4a72fb5924051a41155044f03f55aaa304266
SHA256

3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d
SHA512

ea5827ace763562a502bd32c70df807c570f467eca5e79138bf7a66bb658049cfcd1d9b21e75e692c2a6d4b92e66636cd051138b223194921d1a8dfa061289c9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4696 1440 WerFault.exe 3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d.exe

C:\Users\Admin\AppData\Local\Temp\3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d.exe
"C:\Users\Admin\AppData\Local\Temp\3619fec40668b5c713499b9c451e428fb1c022bda4a24dd9fc3f62e0cc017b4d.exe"
1⤵
PID:1440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 332
2⤵
- Program crash
PID:4696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1440 -ip 1440
1⤵
PID:3756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1440-131-0x00000000005F4000-0x0000000000606000-memory.dmp

Filesize
72KB

Download
memory/1440-132-0x00000000005DE000-0x00000000005F5000-memory.dmp

Filesize
92KB

Download