8b290e05af51739c314638fed0249c16788a7972d949d641b8a313833c50263f | Triage

Analysis

max time kernel
136s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
29-07-2022 14:58

Sharing

Report Analysis Logs

General

Target

4772-137-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

15cae581ee80269496ae2d70a72cc4c6
SHA1

1a71dbd243c372dd3e0ee4806945eba6ad19a5c6
SHA256

8b290e05af51739c314638fed0249c16788a7972d949d641b8a313833c50263f
SHA512

e4c736089e5d07a8b7ccdebea840914e865439a52387698f89fa9178e55888258c59af1044a30aa753e75a68cd00985e4d6eec7c112e923002bb1b83808be9b0

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2040 2868 WerFault.exe 4772-137-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4772-137-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4772-137-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:2868
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2868 -s 216
  2⤵
  - Program crash
  PID:2040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2868 -ip 2868
1⤵
PID:4228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads