d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b | Triage

Analysis

max time kernel
146s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 05:58

Sharing

Report Analysis Logs

General

Target

d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b.exe
Size

100KB
MD5

4a2fb0f697d63ccd36fc9bf32aa387f0
SHA1

6ced80a22e76a3401559786394d62212f80b92c9
SHA256

d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b
SHA512

4a6ee681d966b9820471204a89960ea003f51eeeb968dc098e6d29f123deaa3922fec5cd6f654b9cef9a8ffed60d00b1e47312eaf248d059261bb3100820af19

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

380 664 WerFault.exe d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b.exe

C:\Users\Admin\AppData\Local\Temp\d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b.exe
"C:\Users\Admin\AppData\Local\Temp\d5254a2d8ee7e611ae4ddb0cd0a6ae791a352ce0e9cf47432af64ab62b8b949b.exe"
1⤵
PID:664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 664 -s 224
2⤵
- Program crash
PID:380

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 664 -ip 664
1⤵
PID:3824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...