11db22aa3e436554178c26396d231b0efc7d4e35106207c5a9cabcd95ae4971e | Triage

Analysis

max time kernel
112s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 18:50

Sharing

Report Analysis Logs

General

Target

1704-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

67e80085a956d2d7631d7f4728f4b870
SHA1

a91dc2a654c62ab33bb25a730ed3b7f167a206b2
SHA256

11db22aa3e436554178c26396d231b0efc7d4e35106207c5a9cabcd95ae4971e
SHA512

87e4c2b5f793d9a3f44c3b34f2fed4ef364c7ad4aaf4c04235b3640ad839a53a27f150c859da535d24f03654a9e2ae65a94c1aea34f23607366aabda4e7d86e3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3372 1676 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1704-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:1676

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1676 -s 240
2⤵
- Program crash
PID:3372

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1676 -ip 1676
1⤵
PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads