5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3 | Triage

Analysis

max time kernel
90s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 04:59

Sharing

Report Analysis Logs

General

Target

5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3.exe
Size

100KB
MD5

316ace5370365d9193909b61a68e1a74
SHA1

2b988114482488d976d8b912da8c43661c744e19
SHA256

5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3
SHA512

6f6a6bd348e9f8847dff94fdf1c2b835dbe241bbab9bcc852f38594590d1fefd677e8662b1029676473e652a023f6e2083718cd377262f8261742df59472c822

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2488 3840 WerFault.exe 5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3.exe

C:\Users\Admin\AppData\Local\Temp\5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3.exe
"C:\Users\Admin\AppData\Local\Temp\5685d8c8a87269dca64bb7591a8bbb415cff2773196ec2fffedfd0e85e13c3f3.exe"
1⤵
PID:3840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3840 -s 228
2⤵
- Program crash
PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3840 -ip 3840
1⤵
PID:4320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...