822bdcd5f84371f0e93c8bb43795ae2bbeb6c7c61bb71c87ffdd0163a20ba801 | Triage

Analysis

max time kernel
138s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
06-07-2022 02:44

Sharing

Report Analysis Logs

General

Target

952-68-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

231d77306636cba68051f7a8863a1246
SHA1

6ebdeb9eaf3deb9e64e361237c83d749f14a087c
SHA256

822bdcd5f84371f0e93c8bb43795ae2bbeb6c7c61bb71c87ffdd0163a20ba801
SHA512

8fd393b0d109ba7bc6232d7e6fae68a183a00c25864fdf4981dc03c9979fe7873e015b093f8f0242e10b5927087ce2e4f9e28d58f707ba3f5621263e007cc5a5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5104 4052 WerFault.exe 952-68-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\952-68-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\952-68-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 216
2⤵
- Program crash
PID:5104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4052 -ip 4052
1⤵
PID:3152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...