130dcc3c91717fd03c21250fbf7e8cbfa370bcaeaa219710eac250b25bf40cf1 | Triage

Analysis

max time kernel
91s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
26-06-2022 18:49

Sharing

Report Analysis Logs

General

Target

2624-333-0x0000000000400000-0x0000000000B40000-memory.exe
Size

7.2MB
MD5

297d4d8e96e7cf3b641d03266c420797
SHA1

b176465913e9716dbe1dea65ad9b684f8e28da1b
SHA256

130dcc3c91717fd03c21250fbf7e8cbfa370bcaeaa219710eac250b25bf40cf1
SHA512

fe5176596660613365e78b4729d8d782f19e83eeb55fb92eed9ec3dce04fe505826df3662283a3b3707dae4e2aeb7f7e74ca01740416a49e74828d9a0fee59bb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4516 3740 WerFault.exe 2624-333-0x0000000000400000-0x0000000000B40000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2624-333-0x0000000000400000-0x0000000000B40000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2624-333-0x0000000000400000-0x0000000000B40000-memory.exe"
1⤵
PID:3740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 192
2⤵
- Program crash
PID:4516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3740 -ip 3740
1⤵
PID:3780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...