50bfb60c70d4307f648508fbb24ee6df7c03c1ad39ce4d9708aedae56cbb92b1 | Triage

Analysis

max time kernel
90s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
05-07-2022 05:34

Sharing

Report Analysis Logs

General

Target

1112-68-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

cbb7b908b7a1f3c03b6b892372650392
SHA1

34a9ca29c54faa6139f66f2fe5dfc74702cdd5ef
SHA256

50bfb60c70d4307f648508fbb24ee6df7c03c1ad39ce4d9708aedae56cbb92b1
SHA512

0af6450597ffb83172ce7d38d0ebebe06c0003cd9b40615d83557388318606c9f6f2e37d7135ffc4918ddddb103ea6bc3bb220d037402e20c37bfd2857e32a1c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2856 1564 WerFault.exe 1112-68-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1112-68-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1112-68-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:1564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1564 -s 204
2⤵
- Program crash
PID:2856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1564 -ip 1564
1⤵
PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...