0da1824c4445705dd5dc895756881669e3f2a057fbd2bbc26c539ce2cccb1cbf | Triage

Analysis

max time kernel
138s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27-06-2022 18:32

Sharing

Report Analysis Logs

General

Target

872-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

0ce9b97c12b1b9cf763907554945ba4e
SHA1

9e2b34cc8bccd140be56b3abff1c044de84ced21
SHA256

0da1824c4445705dd5dc895756881669e3f2a057fbd2bbc26c539ce2cccb1cbf
SHA512

12facedfb7e76225d9151ebf207d097894a22ab0ff0024db80ca40f9d82725ce980a963f79d6a9c4880c6e12357a7a1e2d05f74a4f11edc8d08b6b05c67280c0

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5108 4328 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\872-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4328

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4328 -s 240
2⤵
- Program crash
PID:5108

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4328 -ip 4328
1⤵
PID:3152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...