6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210 | Triage

Analysis

max time kernel
150s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 06:13

Sharing

Report Analysis Logs

General

Target

6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210.exe
Size

124KB
MD5

beef0a9cc1cf175a64de589c32d4637c
SHA1

6747172c4392bab1f4531d47290edcb9e03c4517
SHA256

6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210
SHA512

6b25577abdefbabb6327c606ae8638fbac62a39eb83b1c509100b527ee92d0c2153d017d58d56961f4446f0a6c9569643cb207c592088653c908f565141e32cb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4292 5112 WerFault.exe 6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210.exe

C:\Users\Admin\AppData\Local\Temp\6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210.exe
"C:\Users\Admin\AppData\Local\Temp\6edd7db90bebc021609c227f37c841e446e3eaffa520ff360ef177f9dcd26210.exe"
1⤵
PID:5112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5112 -s 224
2⤵
- Program crash
PID:4292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5112 -ip 5112
1⤵
PID:1012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...