3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489 | Triage

Analysis

max time kernel
95s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
01-07-2022 15:15

Sharing

Report Analysis Logs

General

Target

3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe
Size

217KB
MD5

67973413b8bad55eda9d488da40b6058
SHA1

408079ab6e2e58a01cbd421962517683179d3af3
SHA256

3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489
SHA512

707079ce05c523f0995311e421d3ab5838f61896c99bb3bdc148f66b5effd0685f57ffa694f5d61098b253572b46bc81683ffcb8a5388ea6ce329760732f6d5e

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3568 4668 WerFault.exe 3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe

C:\Users\Admin\AppData\Local\Temp\3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe
"C:\Users\Admin\AppData\Local\Temp\3d9f9aed4cda04e705c9756137c6b05402732e55e69c7d5d12decbaf9001e489.exe"
1⤵
PID:4668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4668 -s 484
2⤵
- Program crash
PID:3568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4668 -ip 4668
1⤵
PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4668-130-0x0000000000B80000-0x0000000000B97000-memory.dmp

Filesize
92KB

Download