593d8e27ebcd8c4981a7f0b886ebb24b395abacb375ad0478099dbb0a2376dd6 | Triage

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
07-07-2022 16:40

Sharing

Report Analysis Logs

General

Target

1968-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

e465ca753f3619e46559b4f46f25bcf6
SHA1

a2a0be1b85261b8ebda9537c6dd9b5bfe765440d
SHA256

593d8e27ebcd8c4981a7f0b886ebb24b395abacb375ad0478099dbb0a2376dd6
SHA512

22c4d532df2977d3bb61a8e51783f718aa245e32853cc360daec6f3dec9e7a535498301f157ec14687e73b4c64d2147937995888d1050f9dfbdf6c7aaf565e16

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5108 4108 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1968-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4108

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4108 -s 240
2⤵
- Program crash
PID:5108

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 432 -p 4108 -ip 4108
1⤵
PID:392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads