4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0 | Triage

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
resource tags

arch:x64arch:x86image:win10v2004-20220414-enlocale:en-usos:windows10-2004-x64system
submitted
20-07-2022 17:21

Sharing

Report Analysis Logs

General

Target

4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0.exe
Size

405KB
MD5

8a94f17464afa0bfbe9617f1dd374304
SHA1

e0213df4f3bae64347db6b19fa29202578c978ed
SHA256

4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0
SHA512

f23a0ee1ba5b1d9e9b99c5d7df725e6e2e1096fd428ea47cfbf47fb54baa5449a018020467e2a80b7a5ca4ee9efeccbf76988da068bf1354b2e764d663b29995

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1876 5104 WerFault.exe 4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0.exe

C:\Users\Admin\AppData\Local\Temp\4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0.exe
"C:\Users\Admin\AppData\Local\Temp\4e86bf9bb2a636b38559d1363e02ff3636afc8b6d2439b3f3400eb9063df63a0.exe"
1⤵
PID:5104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5104 -s 480
  2⤵
  - Program crash
  PID:1876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 5104 -ip 5104
1⤵
PID:4880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5104-130-0x00000000022B0000-0x00000000022DF000-memory.dmp

Filesize
188KB

Download