45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598 | Triage

Analysis

max time kernel
135s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-07-2022 11:37

Sharing

Report Analysis Logs

General

Target

45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598.exe
Size

496KB
MD5

237e4a7dea6bfe55df66b8aac3d08fb1
SHA1

e2db290d0784d6aed65cdbfdf337f1ba85e341a7
SHA256

45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598
SHA512

d850e85810e02ffc47d1f16a95046fd29275db879969f04488ea62f1d9685c12b73d3e6c8ebd5752a072a29ad00f7b68375a284cc28eab2b80a867540899ea07

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4844 3476 WerFault.exe 45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598.exe

C:\Users\Admin\AppData\Local\Temp\45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598.exe
"C:\Users\Admin\AppData\Local\Temp\45896248eafdb7aa42703a9dfe5685a4d8074ad9618b3b95acd702dbab277598.exe"
1⤵
PID:3476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 340
2⤵
- Program crash
PID:4844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3476 -ip 3476
1⤵
PID:4484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3476-130-0x0000000002130000-0x0000000002190000-memory.dmp

Filesize
384KB

Download