57b374e2d2f002c11c69b454fcf1aa57bd971cd0638eca12c6691cdb6a2f011c | Triage

Analysis

max time kernel
61s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2022 20:22

Sharing

Report Analysis Logs

General

Target

57b374e2d2f002c11c69b454fcf1aa57bd971cd0638eca12c6691cdb6a2f011c.exe
Size

457KB
MD5

13b78d808996120ae0ce4d1b19947c3e
SHA1

6937e2e6301f5ecb0251c26a3ad0afe4a0d30aed
SHA256

57b374e2d2f002c11c69b454fcf1aa57bd971cd0638eca12c6691cdb6a2f011c
SHA512

1c8000f502c10222aa4e14ae00a709d0f0684286de3a125b41649d8749632a91fba31866ce949713cc7920651745ab1f1f9fe3568d25c9065e37de2c47f754dd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
640	2440	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\57b374e2d2f002c11c69b454fcf1aa57bd971cd0638eca12c6691cdb6a2f011c.exe
"C:\Users\Admin\AppData\Local\Temp\57b374e2d2f002c11c69b454fcf1aa57bd971cd0638eca12c6691cdb6a2f011c.exe"
1⤵
PID:2440
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2440 -s 288
  2⤵
  - Program crash
  PID:640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2440 -ip 2440
1⤵
PID:3260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2440-130-0x00000000020E0000-0x000000000213D000-memory.dmp

Filesize
372KB

Download