54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c | Triage

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 17:48

Sharing

Report Analysis Logs

General

Target

54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c.exe
Size

659KB
MD5

21656ef176bee004042a3439b37d4159
SHA1

1e8b981b43a753a8fadd68138a46544ea860488e
SHA256

54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c
SHA512

f58560d20650335dfb9382f0400b6ffe2c37788385e55188342a581814f7ac24fef29bd95107dfbe307828b7c4cc40f5668d0abba187d9ca36b9f9498ecc1cfe

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4968 4308 WerFault.exe 54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c.exe

C:\Users\Admin\AppData\Local\Temp\54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c.exe
"C:\Users\Admin\AppData\Local\Temp\54dbfdb9c79902b7c4d8e912e23208076551e14c9bb3531f4ff2486df390ef8c.exe"
1⤵
PID:4308

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 276
2⤵
- Program crash
PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4308 -ip 4308
1⤵
PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4308-132-0x0000000002310000-0x00000000023A4000-memory.dmp

Filesize
592KB

Download