05bb58f66e53405318ddc074d159c23c37ca459b150e196dd29d15ae0d2d6492 | Triage

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
29-06-2022 17:25

Sharing

Report Analysis Logs

General

Target

1868-233-0x0000000000400000-0x0000000000B55000-memory.exe
Size

7.3MB
MD5

575ed0b3b3467ddddda7789b9d8c83ff
SHA1

b0377158e816078da550ac1c5bef409cb190e7f9
SHA256

05bb58f66e53405318ddc074d159c23c37ca459b150e196dd29d15ae0d2d6492
SHA512

e13ca88f7553206ee705f7d21299ff95221e4f932616f416f7138eb3fa7955d38461073f1eadb6d0fcc0f1e9fbd3d0f8ab7323254e559169094321e2f832c762

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2004 1804 WerFault.exe 1868-233-0x0000000000400000-0x0000000000B55000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1868-233-0x0000000000400000-0x0000000000B55000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1868-233-0x0000000000400000-0x0000000000B55000-memory.exe"
1⤵
PID:1804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1804 -s 68
2⤵
- Program crash
PID:2004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1804 -ip 1804
1⤵
PID:1112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...