0ea1b7cc12b9636e0bb53de4b00eb9c0d789d43ae8f0c5060f5a685c37ca9d22 | Triage

Analysis

max time kernel
91s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
27-07-2022 15:11

Sharing

Report Analysis Logs

General

Target

468-69-0x0000000000400000-0x0000000000438000-memory.exe
Size

224KB
MD5

93f99712a352cad2dc8f76f7f428b775
SHA1

ac3e777e913eaab9e145e122250e7b195f7b0b2d
SHA256

0ea1b7cc12b9636e0bb53de4b00eb9c0d789d43ae8f0c5060f5a685c37ca9d22
SHA512

8728760e43779ad8d6b6c927d9b14699a62934dea806440b5806cde4010efeee2600c6f1e533909f6940597df57a7955775f15ade7f1f322ef01dbf58b836421

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4432 1488 WerFault.exe 468-69-0x0000000000400000-0x0000000000438000-memory.exe

C:\Users\Admin\AppData\Local\Temp\468-69-0x0000000000400000-0x0000000000438000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\468-69-0x0000000000400000-0x0000000000438000-memory.exe"
1⤵
PID:1488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1488 -s 88
2⤵
- Program crash
PID:4432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1488 -ip 1488
1⤵
PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...