60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62 | Triage

Analysis

max time kernel
150s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
30-07-2022 22:50

Sharing

Report Analysis Logs

General

Target

60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62.exe
Size

878KB
MD5

c99f9affca7ff8957af65193bc62a0a3
SHA1

351a5076e496c450d2e5a1fe838b5a7c77bc12a4
SHA256

60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62
SHA512

14df00adbdd694b4627e76779c5a3f5ddc7bc2bd21d38a272d48b0a05feda908219244813fd9894468324dc6c44a633e64122b4fbde6f63b9ce6f51a8e17cbe4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4476 1612 WerFault.exe 60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62.exe

C:\Users\Admin\AppData\Local\Temp\60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62.exe
"C:\Users\Admin\AppData\Local\Temp\60e848ef74e2251f95ede7564cb3afe78078cf82e3fc2f985b50dcdaa16fcd62.exe"
1⤵
PID:1612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1612 -s 920
2⤵
- Program crash
PID:4476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1612 -ip 1612
1⤵
PID:3276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...