b62b2ccf73bd0d2bd04048aa632e7ecfae41a0ec48acdf14473bb3f9c802dbd4 | Triage

Analysis

max time kernel
91s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
05-07-2022 05:43

Sharing

Report Analysis Logs

General

Target

896-72-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

5f0b419fcbbdfb51e32b42cb2d7449cb
SHA1

a2bf12124597115d76378bb4054143c703d77804
SHA256

b62b2ccf73bd0d2bd04048aa632e7ecfae41a0ec48acdf14473bb3f9c802dbd4
SHA512

7f9ebdd3dc056869906f2d15810345ffa659f4350e00dbe3b26b12c3309a5337f558334e52d5f18bc99a7ca71bcb9484e3c3e55569e47856ac34e32c1cb8ab63

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4644 2100 WerFault.exe 896-72-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\896-72-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\896-72-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:2100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 224
2⤵
- Program crash
PID:4644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2100 -ip 2100
1⤵
PID:4304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...