3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f | Triage

Analysis

max time kernel
139s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
03-07-2022 07:14

Sharing

Report Analysis Logs

General

Target

3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe
Size

314KB
MD5

1056d505887e53dc872cafaeb71be3d1
SHA1

cb8271eaf5413ddad0fc981491962a62f598d48f
SHA256

3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f
SHA512

751e23241ae283aad1f37e70e5a6a146171e04182378040350bc52b5d4afee4315f9123c078809a91eba2daf0fb41ba3842cc9c15f68c25fe69fb95047972117

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
1112	2532	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe
"C:\Users\Admin\AppData\Local\Temp\3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe"
1⤵
PID:2532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 360
  2⤵
  - Program crash
  PID:1112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2532 -ip 2532
1⤵
PID:916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-130-0x0000000000700000-0x000000000072F000-memory.dmp

Filesize
188KB

Download