a9ce03985ab87b07c8481da5d59db8608b2fc946df99d0ff19dc0d34d66945ee | Triage

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 09:43

Sharing

Report Analysis Logs

General

Target

5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe
Size

923KB
MD5

f61231237bbe45009996a9576eddde09
SHA1

e73bda17b68f3b6f2995f4af10b4350f8050e2c8
SHA256

5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821
SHA512

3e18d118a7c8969202b243676ba768bf0f4e8d4dfae17ae9d25e624aea79634905771b20e933fb74571b1cf037eab8f3a85f85ff6e88d24778453a03662a3161

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4564 4444 WerFault.exe 5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe

C:\Users\Admin\AppData\Local\Temp\5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe
"C:\Users\Admin\AppData\Local\Temp\5c061e188979d3b744a102d5d855e845a3b51453488530ea5dca6b098add2821.exe"
1⤵
PID:4444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4444 -s 568
2⤵
- Program crash
PID:4564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4444 -ip 4444
1⤵
PID:3404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4444-130-0x0000000000400000-0x00000000004F8000-memory.dmp

Filesize
992KB

Download
memory/4444-131-0x00000000771A0000-0x0000000077343000-memory.dmp

Filesize
1.6MB

Download
memory/4444-132-0x00000000754B0000-0x00000000756C5000-memory.dmp

Filesize
2.1MB

Download
memory/4444-134-0x0000000000400000-0x00000000004F8000-memory.dmp

Filesize
992KB

Download