08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6 | Triage

Analysis

max time kernel
90s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 06:36

Sharing

Report Analysis Logs

General

Target

08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe
Size

873KB
MD5

827ce17c53de507c34b000e73c103de7
SHA1

c15011e565af3b2845eb9707132d3187fb93a54e
SHA256

08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6
SHA512

e2f54c654a86718e456c18151653626fcb3a361c7717281a6eff47fb68ac0df673926edc4f459b5b7e2e4aaab9e0f644250d48475838b74c488e34e2bbeed766

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3692	3484	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe
"C:\Users\Admin\AppData\Local\Temp\08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe"
1⤵
PID:3484
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3484 -s 568
  2⤵
  - Program crash
  PID:3692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3484 -ip 3484
1⤵
PID:3276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3484-130-0x0000000000400000-0x00000000004DC000-memory.dmp

Filesize
880KB

Download
memory/3484-131-0x00000000776B0000-0x0000000077853000-memory.dmp

Filesize
1.6MB

Download
memory/3484-132-0x0000000077480000-0x0000000077695000-memory.dmp

Filesize
2.1MB

Download
memory/3484-134-0x0000000000400000-0x00000000004DC000-memory.dmp

Filesize
880KB

Download