408eb90777d241ef6262ab2264c5612f85e7fd4afe2ce875e5a3f9e8a842a363 | Triage

Analysis

max time kernel
158s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 16:12

Sharing

Report Analysis Logs

General

Target

408eb90777d241ef6262ab2264c5612f85e7fd4afe2ce875e5a3f9e8a842a363.exe
Size

370KB
MD5

5faf71a3d9ffc1630c72da2ad1b608ac
SHA1

3afa63e50cbf8008a45538e62a717812916f879d
SHA256

408eb90777d241ef6262ab2264c5612f85e7fd4afe2ce875e5a3f9e8a842a363
SHA512

9e6846c0fa672f1bae3cc36eb3ed4c683f4c4e9d77dd0bdaa51d0c038cd8b41fd236dd11a0c08bc82d75612a04345096b08eb734e74af41a5a9fdc47f7f74210

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
3036	4924	WerFault.exe	15

C:\Users\Admin\AppData\Local\Temp\408eb90777d241ef6262ab2264c5612f85e7fd4afe2ce875e5a3f9e8a842a363.exe
"C:\Users\Admin\AppData\Local\Temp\408eb90777d241ef6262ab2264c5612f85e7fd4afe2ce875e5a3f9e8a842a363.exe"
1⤵
PID:4924
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 520
  2⤵
  - Program crash
  PID:3036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4924 -ip 4924
1⤵
PID:1348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4924-130-0x0000000002270000-0x000000000229F000-memory.dmp

Filesize
188KB

Download