58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8 | Triage

Analysis

max time kernel
141s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2022 06:50

Sharing

Report Analysis Logs

General

Target

58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8.exe
Size

543KB
MD5

0e7c4cb7365c823b11f7204d695b06a6
SHA1

403fc69b0124c9a8d5dd0bc36011ed6be1dff64e
SHA256

58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8
SHA512

18b1b999e0b3c4333e837fc7f4c4b35dd908006eb9cfa6e05cdf3144fa6bbd69332b476b121e98912b7a315c8f4ac622bc341dfda7f2ffb726abdcd555ba24e9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2792 2484 WerFault.exe 58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8.exe

C:\Users\Admin\AppData\Local\Temp\58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8.exe
"C:\Users\Admin\AppData\Local\Temp\58b349c793282532e1874661a64f8e5a4286c9477ecb3d08e77242359e3243b8.exe"
1⤵
PID:2484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 232
2⤵
- Program crash
PID:2792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2484 -ip 2484
1⤵
PID:956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2484-130-0x0000000000620000-0x0000000000699000-memory.dmp

Filesize
484KB

Download