3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a | Triage

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
03-07-2022 10:10

Sharing

Report Analysis Logs

General

Target

3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a.exe
Size

525KB
MD5

2f27b0e0ee037e581998f46831cea56f
SHA1

995c806d677bb4df3274134a964c180ecbc1d173
SHA256

3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a
SHA512

e4302cd050f1957649396a615ed744f7357cc93bd7e43c09353c0717e0b73bfd00f84854cf8ea407d3c59f130931369b8e28929bb7b2dfe0174073bc952285f5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2332 3584 WerFault.exe 3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a.exe

C:\Users\Admin\AppData\Local\Temp\3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a.exe
"C:\Users\Admin\AppData\Local\Temp\3ba1ab7614c5a74e4ad9f0c8f095e45a8bc9125be155f63a8a2bb70e7492931a.exe"
1⤵
PID:3584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3584 -s 276
2⤵
- Program crash
PID:2332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3584 -ip 3584
1⤵
PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3584-130-0x00000000020D0000-0x000000000213D000-memory.dmp

Filesize
436KB

Download