42b053c01ac747b6f67dba1c108c70f379fb84770f9884537167e6f5eb5e8fcf | Triage

Analysis

max time kernel
141s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08/07/2022, 01:43

Sharing

Report Analysis Logs

General

Target

42b053c01ac747b6f67dba1c108c70f379fb84770f9884537167e6f5eb5e8fcf.exe
Size

352KB
MD5

0d704d7223e378e9e5c18d0f53e038da
SHA1

3f6bc9426c8e3eff59b8aad08cdb050ec2d3e7cb
SHA256

42b053c01ac747b6f67dba1c108c70f379fb84770f9884537167e6f5eb5e8fcf
SHA512

f8dabf5ef228f143a699a31e366aa6af3fc13ada4a39448b3982e34c30e2afaeccf3b91c5b2d267ab895b8ffbe7da0daab13f8e49474dd68e47b923c9fd2eb85

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1196	4848	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\42b053c01ac747b6f67dba1c108c70f379fb84770f9884537167e6f5eb5e8fcf.exe
"C:\Users\Admin\AppData\Local\Temp\42b053c01ac747b6f67dba1c108c70f379fb84770f9884537167e6f5eb5e8fcf.exe"
1⤵
PID:4848
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 532
  2⤵
  - Program crash
  PID:1196

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4848 -ip 4848
1⤵
PID:4028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-130-0x0000000002280000-0x00000000022AF000-memory.dmp

Filesize
188KB

Download