190caf13d078b1ccf013474a18aaee99f4c871cf55b02f3d2cc684812b65d9ed | Triage

Analysis

max time kernel
62s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 04:59

Sharing

Report Analysis Logs

General

Target

1960-69-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

98b69e243181d9e2d02864a7512cef65
SHA1

2835009a72a8dd91b893a669694a66fa6d192d55
SHA256

190caf13d078b1ccf013474a18aaee99f4c871cf55b02f3d2cc684812b65d9ed
SHA512

eea1b8024fe5ef55ce5d3da018c458eda33afe1ce101a5dbddd598eb24598862253c001331f09238517c8486787f8fe19744bd0bd555b81109281d6d9e8d69de

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4884 5048 WerFault.exe 1960-69-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1960-69-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1960-69-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:5048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5048 -s 216
2⤵
- Program crash
PID:4884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5048 -ip 5048
1⤵
PID:2496

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...