5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c | Triage

Analysis

max time kernel
60s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 05:50

Sharing

Report Analysis Logs

General

Target

5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c.exe
Size

704KB
MD5

8f697f5ffea8dd1cf7a65765ec9b0bf7
SHA1

fdfc87bb2c64c4d51ff82bac4a25bc39b7366da7
SHA256

5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c
SHA512

a1bbda373579a2e42875c787b9a138a26ebd9b5af3bfd417e17109135808a2a41ab850e8fb8217ec66f579fe0224a3a575a506fb605ac90ce095275565fb24aa

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4316 4228 WerFault.exe 5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c.exe

C:\Users\Admin\AppData\Local\Temp\5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c.exe
"C:\Users\Admin\AppData\Local\Temp\5617c08ef5b20dab48d3561f68ff02717a06bec3a58468fe01d2b2c40e35575c.exe"
1⤵
PID:4228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4228 -s 268
2⤵
- Program crash
PID:4316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4228 -ip 4228
1⤵
PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4228-132-0x0000000002380000-0x0000000002414000-memory.dmp

Filesize
592KB

Download