5375d680745593f96ad797fb29b770228dfc8169613a72928a67003f36a9ba12 | Triage

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
resource tags

arch:x64arch:x86image:win10v2004-20220414-enlocale:en-usos:windows10-2004-x64system
submitted
16-07-2022 23:48

Sharing

Report Analysis Logs

General

Target

5375d680745593f96ad797fb29b770228dfc8169613a72928a67003f36a9ba12.exe
Size

337KB
MD5

68a457cedcf7dc8ef24863d223ccece5
SHA1

8a6b62d84b00f8bf72e903c8591486dbea87b4ec
SHA256

5375d680745593f96ad797fb29b770228dfc8169613a72928a67003f36a9ba12
SHA512

0fbef2de39466a9007c1a69827eb40ebf6ab78295155285955c37362e160ab8c7cd1ff5f5ee2132b9d26986b83f211eda1c03ffa0fab1e8806a445dba5329d25

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
4676	1688	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\5375d680745593f96ad797fb29b770228dfc8169613a72928a67003f36a9ba12.exe
"C:\Users\Admin\AppData\Local\Temp\5375d680745593f96ad797fb29b770228dfc8169613a72928a67003f36a9ba12.exe"
1⤵
PID:1688
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1688 -s 552
  2⤵
  - Program crash
  PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1688 -ip 1688
1⤵
PID:2832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1688-130-0x00000000022B0000-0x00000000022DE000-memory.dmp

Filesize
184KB

Download