56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4 | Triage

Analysis

max time kernel
91s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 03:45

Sharing

Report Analysis Logs

General

Target

56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4.exe
Size

1.0MB
MD5

852358b498a9fec383553c1960a36473
SHA1

bce959aadba354238203e88e38562ba1797a0bd8
SHA256

56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4
SHA512

5f2bf3af9a17a2fbf1cd5083bf6e60134a94fcb92838f794eabe5713a7dbe57347c3374a66875dce55052a2da33e5be202e186f7398b4dc3e574af17a3cb25f2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4524 3868 WerFault.exe 56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4.exe

C:\Users\Admin\AppData\Local\Temp\56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4.exe
"C:\Users\Admin\AppData\Local\Temp\56601d91a44c55a697ac0eb0a417d4df7e7fa6761ca423f68c4fc4b80ebddbe4.exe"
1⤵
PID:3868

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3868 -s 408
2⤵
- Program crash
PID:4524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3868 -ip 3868
1⤵
PID:4368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...