4ea10c3a6ae96b763e3bb808c22c908a95d9d384f3ff40ecddc2f86fdefb80a3 | Triage

Analysis

max time kernel
91s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
26-07-2022 15:41

Sharing

Report Analysis Logs

General

Target

2028-67-0x0000000000400000-0x0000000000438000-memory.exe
Size

224KB
MD5

68752f2f00d08a269aa317667ac66ddf
SHA1

5cd701505bc5c29d5f382c039d5ff05fc08906b7
SHA256

4ea10c3a6ae96b763e3bb808c22c908a95d9d384f3ff40ecddc2f86fdefb80a3
SHA512

c35d11806c04e8ada0f8a3606f3c278b9aa70968f211769e780f16839c4bc4351a528171e7c6b6df1e83f54459e380af6250d1baabc6d7bd602d1de56d6c5c63

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4580 1484 WerFault.exe 2028-67-0x0000000000400000-0x0000000000438000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2028-67-0x0000000000400000-0x0000000000438000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2028-67-0x0000000000400000-0x0000000000438000-memory.exe"
1⤵
PID:1484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 80
2⤵
- Program crash
PID:4580

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1484 -ip 1484
1⤵
PID:4704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...