c278eef3269d6b367d3713de1d138fad437b06c4d8e66a7f7f2bf4e1555a400b | Triage

Analysis

max time kernel
91s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
11-07-2022 18:19

Sharing

Report Analysis Logs

General

Target

1852-54-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

1e9eaa35ba3aaec219bd19279edc1d90
SHA1

160e3ff593506785f55ee68f1274370681dbbf2f
SHA256

c278eef3269d6b367d3713de1d138fad437b06c4d8e66a7f7f2bf4e1555a400b
SHA512

2fa663a1708f443fa60a12417db3451125b3b7798fb9819a426f5dbf9017740fbcf50f55a22e56341cba1892bd33ecd0b3d0a35aa6d8ea1ae9de5a7f292662a2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4236 4052 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1852-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4052

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4052 -s 244
2⤵
- Program crash
PID:4236

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 4052 -ip 4052
1⤵
PID:1476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...