af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347 | Triage

Analysis

max time kernel
1760s
max time network
1589s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
28-06-2022 18:18

Sharing

Report Analysis Logs

General

Target

af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347.exe
Size

256KB
MD5

beddff97291279cbff84fa55fa85dcc8
SHA1

1a76fc9fcee3ec83e339248197d036789a03e7b8
SHA256

af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347
SHA512

5c0147e4098afae2dc4a0b801f3b637335801acae0811e99a2c0e0353c8a4433126ff3ace0f276d11c688ea85b8c2b6d7da17f21a489d8c1bddc37f091ce3c6a

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4196 5008 WerFault.exe af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347.exe

C:\Users\Admin\AppData\Local\Temp\af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347.exe
"C:\Users\Admin\AppData\Local\Temp\af7797bf0df65314f3173e06b114b0498ee0d76c35a243376d1bc1efc4a01347.exe"
1⤵
PID:5008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 564
2⤵
- Program crash
PID:4196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5008 -ip 5008
1⤵
PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...