0281a61ca8ff509cb26c37cf285d9f80e4001cc9a79c9b85648502ee2eb1ed2e | Triage

Analysis

max time kernel
98s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 11:26

Sharing

Report Analysis Logs

General

Target

1728-69-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

9f08bc579056ce694985f08e078c234f
SHA1

dddb86eb7326276a22bbc9a06799715e8fae1ed6
SHA256

0281a61ca8ff509cb26c37cf285d9f80e4001cc9a79c9b85648502ee2eb1ed2e
SHA512

ddb7fc33064a80f984db29374f49a047c7fd6a67994c16e5369fcc6dbb1aef4e583403c240f4d8fedc061003aecf94f2a913089198d0dce8676cf2d2e59a4845

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4400 4840 WerFault.exe 1728-69-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1728-69-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1728-69-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:4840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4840 -s 216
2⤵
- Program crash
PID:4400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4840 -ip 4840
1⤵
PID:5028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads