463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0 | Triage

Analysis

max time kernel
200s
max time network
232s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-07-2022 09:30

Sharing

Report Analysis Logs

General

Target

463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0.exe
Size

572KB
MD5

0d1c613c0d4c043da6c051c0aad02745
SHA1

c5af9b17cefb7659d95ec58bb4e3d423ed02e532
SHA256

463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0
SHA512

123e139e907e82af952b8ad7d01da4c1a72a672faebe483e5b75a1bac8bcb407dd1028e85039d4c04b64d9870f03419e8ad51bdd908084513881488f8f17abf2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3132 4952 WerFault.exe 463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0.exe

C:\Users\Admin\AppData\Local\Temp\463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0.exe
"C:\Users\Admin\AppData\Local\Temp\463424c1749ddc43cca2b9ce49b14c5ffcbe985c2214890b6a19e4b22d0122d0.exe"
1⤵
PID:4952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 216
2⤵
- Program crash
PID:3132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4952 -ip 4952
1⤵
PID:2696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...