5a0ac24bdb5c72ab2adfae6a57b49c3e9d4667d9b05b3327120f340b8b1b5a64 | Triage

Analysis

max time kernel
108s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2022 02:03

Sharing

Report Analysis Logs

General

Target

5a0ac24bdb5c72ab2adfae6a57b49c3e9d4667d9b05b3327120f340b8b1b5a64.exe
Size

345KB
MD5

546f923bdea9f07e9bcc7b658e6f4266
SHA1

9679a020f66e363b46e4113ef6d5c0e4f926a25b
SHA256

5a0ac24bdb5c72ab2adfae6a57b49c3e9d4667d9b05b3327120f340b8b1b5a64
SHA512

dceb9e39eebd4fd44b1373e4e14403c1ff0fbfb2a9170d1866cf25b1c091899f653a573e24feb3e119e6ad70563dab35218fea9a9f1352c662285e2c68bddce5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
3016	1416	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\5a0ac24bdb5c72ab2adfae6a57b49c3e9d4667d9b05b3327120f340b8b1b5a64.exe
"C:\Users\Admin\AppData\Local\Temp\5a0ac24bdb5c72ab2adfae6a57b49c3e9d4667d9b05b3327120f340b8b1b5a64.exe"
1⤵
PID:1416
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1416 -s 492
  2⤵
  - Program crash
  PID:3016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1416 -ip 1416
1⤵
PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1416-130-0x0000000002260000-0x000000000228F000-memory.dmp

Filesize
188KB

Download