3f9d09eb0b0806230a640d094906b70af2c477c46c9871939fddd3764da05004 | Triage

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
30-06-2022 23:57

Sharing

Report Analysis Logs

General

Target

3f9d09eb0b0806230a640d094906b70af2c477c46c9871939fddd3764da05004.exe
Size

251KB
MD5

3035c2a62327490bb50b35170fa1904d
SHA1

cc6c89bf2d359e36ac3039c4c8e945af1bc2fdfb
SHA256

3f9d09eb0b0806230a640d094906b70af2c477c46c9871939fddd3764da05004
SHA512

3bc91e9d4aacb5cbd6b897b4f0a6ffb1aa53e1e0ada93947d08751f9f32a364740d17b9bc0b1216f9d4af5f33e78f883e9e1ef059cf3ecc5c3c4f0ae61a11576

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
4764	3216	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\3f9d09eb0b0806230a640d094906b70af2c477c46c9871939fddd3764da05004.exe
"C:\Users\Admin\AppData\Local\Temp\3f9d09eb0b0806230a640d094906b70af2c477c46c9871939fddd3764da05004.exe"
1⤵
PID:3216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3216 -s 512
  2⤵
  - Program crash
  PID:4764

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3216 -ip 3216
1⤵
PID:4768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3216-130-0x0000000002280000-0x00000000022AE000-memory.dmp

Filesize
184KB

Download