c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469 | Triage

Analysis

max time kernel
90s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 04:34

Sharing

Report Analysis Logs

General

Target

c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469.exe
Size

100KB
MD5

a39c4e63131b42c4f06fa7fb0937f4cb
SHA1

1a1d342478d986653e98fbe57baab9144c15f4bd
SHA256

c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469
SHA512

8ae5191ffa56e2f312f2a06c5134e8562a7daab622a32374b203f97279c373645d1b2357d5e47542193cbdebeaf50ba31bab08141e006d3d54e9f768b3793041

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4724 4028 WerFault.exe c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469.exe

C:\Users\Admin\AppData\Local\Temp\c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469.exe
"C:\Users\Admin\AppData\Local\Temp\c8faec8e4990de979e3be1e29db96bc51406adf26ee07b2c33f000951a038469.exe"
1⤵
PID:4028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 224
2⤵
- Program crash
PID:4724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4028 -ip 4028
1⤵
PID:4328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...