c5519ec930a68a4557296fe12666232047a5f6a181990db91d535fc5b18d2739 | Triage

Analysis

max time kernel
152s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
resource tags

arch:x64arch:x86image:win10v2004-20220414-enlocale:en-usos:windows10-2004-x64system
submitted
16-07-2022 13:22

Sharing

Report Analysis Logs

General

Target

3372-130-0x0000000003790000-0x000000000481E000-memory.exe
Size

16.6MB
MD5

b6612708017821f9afb67cd487d591a5
SHA1

b1eddc75b4c1d388b93283702d37778e4c662b7b
SHA256

c5519ec930a68a4557296fe12666232047a5f6a181990db91d535fc5b18d2739
SHA512

57211e23d67ce1466631097d37a135d2ca053ed240560152db25916b47f3c58e86d39fa7d3a136ee903d7d8034b653aec1e9f1145e6df2525e6e21e021647c1c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2324 3568 WerFault.exe 3372-130-0x0000000003790000-0x000000000481E000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3372-130-0x0000000003790000-0x000000000481E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3372-130-0x0000000003790000-0x000000000481E000-memory.exe"
1⤵
PID:3568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3568 -s 216
2⤵
- Program crash
PID:2324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3568 -ip 3568
1⤵
PID:2592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...