e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da | Triage

Analysis

max time kernel
115s
max time network
119s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
31-07-2022 06:47

Sharing

Report Analysis Logs

General

Target

e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe
Size

173KB
MD5

d1c6e0ce4ff9cc463a98694ac35bfa15
SHA1

ff8672a8e252c9bf3dc3eefbbc0d237efda2a520
SHA256

e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da
SHA512

6d93aff9c1668d9de4922ddf5f4a35bffbd427524540d375bc9eca4fb620595887ecd957e18dcf48b2266eb0a4a8e2ba581d66af0b8b225e8de4dbde2a9b55ce

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1268 4896 WerFault.exe e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe

C:\Users\Admin\AppData\Local\Temp\e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe
"C:\Users\Admin\AppData\Local\Temp\e421ee934b7ab1a577b03b9c89a20eb3a283f1ed9ed0faf365a573ec90cb26da.exe"
1⤵
PID:4896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4896 -s 496
2⤵
- Program crash
PID:1268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4896 -ip 4896
1⤵
PID:3336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...