11db22aa3e436554178c26396d231b0efc7d4e35106207c5a9cabcd95ae4971e | Triage

Analysis

max time kernel
103s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 18:50

Sharing

Report Analysis Logs

General

Target

1704-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

67e80085a956d2d7631d7f4728f4b870
SHA1

a91dc2a654c62ab33bb25a730ed3b7f167a206b2
SHA256

11db22aa3e436554178c26396d231b0efc7d4e35106207c5a9cabcd95ae4971e
SHA512

87e4c2b5f793d9a3f44c3b34f2fed4ef364c7ad4aaf4c04235b3640ad839a53a27f150c859da535d24f03654a9e2ae65a94c1aea34f23607366aabda4e7d86e3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1356 5052 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1704-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:5052

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5052 -s 240
2⤵
- Program crash
PID:1356

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 5052 -ip 5052
1⤵
PID:1496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...