3ad6095a3e0fd85772af0c88241503cfc4e8a641507e279c9450b845d7702927 | Triage

Analysis

max time kernel
152s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
03-07-2022 18:41

Sharing

Report Analysis Logs

General

Target

3ad6095a3e0fd85772af0c88241503cfc4e8a641507e279c9450b845d7702927.exe
Size

370KB
MD5

15e892385171f8c0712e0706705046ac
SHA1

5c8a0840bf94dd2873fff4f1e839272c166849ff
SHA256

3ad6095a3e0fd85772af0c88241503cfc4e8a641507e279c9450b845d7702927
SHA512

233bf6f2e7184813663bccb6e5db7413a29a70e5ef53d5cadfeaffad71b4275cb74752b80bd99ce79c13bf47117e4f98d415e2b2592695abbbc3c378b3b38fa2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
2260	2384	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\3ad6095a3e0fd85772af0c88241503cfc4e8a641507e279c9450b845d7702927.exe
"C:\Users\Admin\AppData\Local\Temp\3ad6095a3e0fd85772af0c88241503cfc4e8a641507e279c9450b845d7702927.exe"
1⤵
PID:2384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2384 -s 548
  2⤵
  - Program crash
  PID:2260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2384 -ip 2384
1⤵
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2384-130-0x00000000022B0000-0x00000000022DF000-memory.dmp

Filesize
188KB

Download