5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821 | Triage

Analysis

max time kernel
92s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 06:23

Sharing

Report Analysis Logs

General

Target

5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe
Size

923KB
MD5

f61231237bbe45009996a9576eddde09
SHA1

e73bda17b68f3b6f2995f4af10b4350f8050e2c8
SHA256

5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821
SHA512

3e18d118a7c8969202b243676ba768bf0f4e8d4dfae17ae9d25e624aea79634905771b20e933fb74571b1cf037eab8f3a85f85ff6e88d24778453a03662a3161

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1016 1548 WerFault.exe 5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe

C:\Users\Admin\AppData\Local\Temp\5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe
"C:\Users\Admin\AppData\Local\Temp\5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe"
1⤵
PID:1548

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 572
2⤵
- Program crash
PID:1016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1548 -ip 1548
1⤵
PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1548-130-0x0000000000400000-0x00000000004F8000-memory.dmp

Filesize
992KB

Download
memory/1548-131-0x00000000778A0000-0x0000000077A43000-memory.dmp

Filesize
1.6MB

Download
memory/1548-132-0x0000000075880000-0x0000000075A95000-memory.dmp

Filesize
2.1MB

Download
memory/1548-134-0x0000000000400000-0x00000000004F8000-memory.dmp

Filesize
992KB

Download