94c37481e84950f421449c1c7e29faf0c3c298b265a8cbef1b8e2bc92f906667 | Triage

Analysis

max time kernel
150s
max time network
86s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
21-07-2022 13:51

Sharing

Report Analysis Logs

General

Target

1020-70-0x0000000000400000-0x0000000000438000-memory.exe
Size

224KB
MD5

da1ea50c9271cbb6e239d4b1ed8621b4
SHA1

12fc474775a9a84938b9526c3c72dc68dbc3531d
SHA256

94c37481e84950f421449c1c7e29faf0c3c298b265a8cbef1b8e2bc92f906667
SHA512

6a1c65bf6b24d397a8af30121f6bd06ad51627ab5aa22a877ff221f3651436144f5952539e0b4ce1e3ef09d3ea70b5e4c1bc116faea1281c7be8ff5242dac542

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1424 1312 WerFault.exe 1020-70-0x0000000000400000-0x0000000000438000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1020-70-0x0000000000400000-0x0000000000438000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1020-70-0x0000000000400000-0x0000000000438000-memory.exe"
1⤵
PID:1312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 80
2⤵
- Program crash
PID:1424

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1312 -ip 1312
1⤵
PID:1608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...