573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711 | Triage

Analysis

max time kernel
69s
max time network
91s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 00:08

Sharing

Report Analysis Logs

General

Target

573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711.exe
Size

73KB
MD5

5c67bfc12fc8c93bb98225966ad468d1
SHA1

cabcb7a591c7fbf9c5e90d84cefc16d1a94ac0eb
SHA256

573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711
SHA512

20cfb4b43779fc0ff2c1b9bc177f3c58ecbdf33c8225286b680eb65abe3a434123b2c435a23b43ebb4960cd0e1cff4359006041efc4129b69f8a05b6d3364bd5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4428 5056 WerFault.exe 573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711.exe

C:\Users\Admin\AppData\Local\Temp\573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711.exe
"C:\Users\Admin\AppData\Local\Temp\573dc43b7ec06057f40006795c11c163b52837c63c08e1c0e27c41c9839e7711.exe"
1⤵
PID:5056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 408
2⤵
- Program crash
PID:4428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5056 -ip 5056
1⤵
PID:4648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...