402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a | Triage

Analysis

max time kernel
148s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 21:02

Sharing

Report Analysis Logs

General

Target

402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe
Size

408KB
MD5

81eb1ba1a5b0289bab6fb45e54719df1
SHA1

e2c20fcf01e745ea6847f1a043e56f65343c72a7
SHA256

402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a
SHA512

3580308cc941245877fc09899d81d937bd7e5baa46460b07cb3a4a41271c8b85ae3d0aa6821863a2cf25a6b373cce6a8b89977322dfed3aa89398e1bc0decf08

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
4652	2016	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe
"C:\Users\Admin\AppData\Local\Temp\402b79b1b53604ec3c7a4e969d834df62c8cc7c7f2d876d8678c7c1f59eb1d7a.exe"
1⤵
PID:2016
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2016 -s 480
  2⤵
  - Program crash
  PID:4652

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2016 -ip 2016
1⤵
PID:3564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-130-0x00000000022A0000-0x00000000022CF000-memory.dmp

Filesize
188KB

Download