a9ce03985ab87b07c8481da5d59db8608b2fc946df99d0ff19dc0d34d66945ee | Triage

Analysis

max time kernel
91s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 09:43

Sharing

Report Analysis Logs

General

Target

08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe
Size

873KB
MD5

827ce17c53de507c34b000e73c103de7
SHA1

c15011e565af3b2845eb9707132d3187fb93a54e
SHA256

08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6
SHA512

e2f54c654a86718e456c18151653626fcb3a361c7717281a6eff47fb68ac0df673926edc4f459b5b7e2e4aaab9e0f644250d48475838b74c488e34e2bbeed766

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4664 4168 WerFault.exe 08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe

C:\Users\Admin\AppData\Local\Temp\08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe
"C:\Users\Admin\AppData\Local\Temp\08565f345878369fdbbcf4a064d9f4762f4549f67d1e2aa3907a112a5e5322b6.exe"
1⤵
PID:4168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4168 -s 568
2⤵
- Program crash
PID:4664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4168 -ip 4168
1⤵
PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4168-130-0x0000000000400000-0x00000000004DC000-memory.dmp

Filesize
880KB

Download
memory/4168-131-0x0000000077130000-0x00000000772D3000-memory.dmp

Filesize
1.6MB

Download
memory/4168-132-0x0000000076210000-0x0000000076425000-memory.dmp

Filesize
2.1MB

Download
memory/4168-134-0x0000000000400000-0x00000000004DC000-memory.dmp

Filesize
880KB

Download