8b118af6bd76a92a80f72fa0e8979bb758e79c6c3dfc837d3dd12c3a2605bc42 | Triage

Analysis

max time kernel
107s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 10:33

Sharing

Report Analysis Logs

General

Target

1836-57-0x0000000000400000-0x0000000000635000-memory.exe
Size

2.2MB
MD5

c7c5025d097cab2403a19e980539e315
SHA1

045b28746d757135b848f4069bcec0824d2868f4
SHA256

8b118af6bd76a92a80f72fa0e8979bb758e79c6c3dfc837d3dd12c3a2605bc42
SHA512

6cb013ffa304fa0e4f31a797eed69158e46bed51354bdf84531bb602f20e870797cdb77af7ee86eaee71763bfb953fce97f8e30fb952d5ea51580dbef37efb7c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4436 2480 WerFault.exe 1836-57-0x0000000000400000-0x0000000000635000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1836-57-0x0000000000400000-0x0000000000635000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1836-57-0x0000000000400000-0x0000000000635000-memory.exe"
1⤵
PID:2480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2480 -s 216
2⤵
- Program crash
PID:4436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2480 -ip 2480
1⤵
PID:4532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...