780ece7c9255e046ad7ab43ea24f9edc53342d2e0310e4049798613ca70f276b | Triage

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
06-07-2022 04:38

Sharing

Report Analysis Logs

General

Target

1944-57-0x0000000000400000-0x0000000000A8F000-memory.exe
Size

6.6MB
MD5

2aaae0c726bcdd95d8817997d5cb38af
SHA1

be93c0ad880473620bc0676cbcaee1bf2c2acd6b
SHA256

780ece7c9255e046ad7ab43ea24f9edc53342d2e0310e4049798613ca70f276b
SHA512

3001a37dbdea475f749b4d7eec50ebef0685c5514662eee9f3bf4e763fee483cbec76ecc485192e904dfd340c43c25d91593f9a8cc43b02eea937d92d2395495

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

756 2124 WerFault.exe 1944-57-0x0000000000400000-0x0000000000A8F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1944-57-0x0000000000400000-0x0000000000A8F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1944-57-0x0000000000400000-0x0000000000A8F000-memory.exe"
1⤵
PID:2124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2124 -s 80
2⤵
- Program crash
PID:756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2124 -ip 2124
1⤵
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...