483c277d10a4f2404cf8b8307b3f695877db293e16f4e34bd3d87d15b60b6ce8 | Triage

Analysis

max time kernel
92s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
14-07-2022 03:52

Sharing

Report Analysis Logs

General

Target

483c277d10a4f2404cf8b8307b3f695877db293e16f4e34bd3d87d15b60b6ce8.exe
Size

345KB
MD5

4c72a97d3a737957aa1dbc187f980847
SHA1

61da3ae2806ddf6efe5e117143c57346f5986c79
SHA256

483c277d10a4f2404cf8b8307b3f695877db293e16f4e34bd3d87d15b60b6ce8
SHA512

476cb723450468366d47095d414de402cc13698896091c052b18de05b63f22706117fc2db39216656f3b7f6264d2a379f226675cd4e233ed183603534919cdfd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
1052	5060	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\483c277d10a4f2404cf8b8307b3f695877db293e16f4e34bd3d87d15b60b6ce8.exe
"C:\Users\Admin\AppData\Local\Temp\483c277d10a4f2404cf8b8307b3f695877db293e16f4e34bd3d87d15b60b6ce8.exe"
1⤵
PID:5060
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 416
  2⤵
  - Program crash
  PID:1052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 5060 -ip 5060
1⤵
PID:4184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5060-130-0x0000000002260000-0x000000000228F000-memory.dmp

Filesize
188KB

Download