b1aeb3ccabe1414b2315e414bbfe9c3295c81857b1ca180b22cec81cde2f7748 | Triage

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
04-07-2022 19:06

Sharing

Report Analysis Logs

General

Target

1564-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

687afe8d580b6ebb92bde325e349a148
SHA1

8bf409991beca6a454dd7acb7d9fa8ecb90bb7c6
SHA256

b1aeb3ccabe1414b2315e414bbfe9c3295c81857b1ca180b22cec81cde2f7748
SHA512

29c22cfeec6daf9d4a5c02deb1a5f04773ebcfd2f686546aa39d5f3e8a29ca61b42762cc638c59efd8cd8938f21a2c7732dea80299aae49ee8527f67dd9f0a7d

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5116 4428 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1564-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4428

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4428 -s 240
2⤵
- Program crash
PID:5116

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 4428 -ip 4428
1⤵
PID:4820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...