3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf | Triage

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 06:16

Sharing

Report Analysis Logs

General

Target

3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf.exe
Size

172KB
MD5

d2a9ad833e9cd9b164b25f69bfff840d
SHA1

9026272dfa06c8264ae665c7eeba7f2ae21b422d
SHA256

3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf
SHA512

424cf822d81ff143c81cba873ea8121cff8848da71bc3d8f86beb96abbf41022da02c59831c4bea68bc9c5ebd53a2cbb4998bb0ed597bfba13db4553768a33ea

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1096 2488 WerFault.exe 3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf.exe

C:\Users\Admin\AppData\Local\Temp\3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf.exe
"C:\Users\Admin\AppData\Local\Temp\3ea10d56200e1d49aca9b34e1198e7f1a79d04f27a9683c08fa3bab82481dfaf.exe"
1⤵
PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2488 -s 376
2⤵
- Program crash
PID:1096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2488 -ip 2488
1⤵
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...