41e328055802f241a6b733563c04aa5945ad667bc1f0807b672c11c7fa477d17 | Triage

Analysis

max time kernel
115s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 04:17

Sharing

Report Analysis Logs

General

Target

41e328055802f241a6b733563c04aa5945ad667bc1f0807b672c11c7fa477d17.exe
Size

407KB
MD5

217e5f6481da0dc7c88a39c8acc51f2e
SHA1

a1db164026ad38fb1937ac27d3de2fc09de9ea47
SHA256

41e328055802f241a6b733563c04aa5945ad667bc1f0807b672c11c7fa477d17
SHA512

c8dd0b61e1a5f019cb87f4cc6089a6b24409ef28e1318ae4616d6cf4e3ee5f167d384fc4cf283d3e865590b03db85caad1f1568371e1cbc5c78a25c46ff250f4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
4432	1484	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\41e328055802f241a6b733563c04aa5945ad667bc1f0807b672c11c7fa477d17.exe
"C:\Users\Admin\AppData\Local\Temp\41e328055802f241a6b733563c04aa5945ad667bc1f0807b672c11c7fa477d17.exe"
1⤵
PID:1484
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 480
  2⤵
  - Program crash
  PID:4432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1484 -ip 1484
1⤵
PID:3456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1484-130-0x0000000000830000-0x000000000085F000-memory.dmp

Filesize
188KB

Download