5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef | Triage

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
02-08-2022 03:13

Sharing

Report Analysis Logs

General

Target

5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef.exe
Size

316KB
MD5

15b3a2d61092350cbaebd1f0e4323044
SHA1

3ca2e8069bde86e031bb8aed2042821423b6845f
SHA256

5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef
SHA512

2c47df346ca5ef323453c621645ce36f292c586330feb1375cdcd779ba28d70b53a9f221d442a2d7cabeacca3d244064088299a0f7ff57afc833766c99520b41

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3464 556 WerFault.exe 5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef.exe

C:\Users\Admin\AppData\Local\Temp\5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef.exe
"C:\Users\Admin\AppData\Local\Temp\5a8918c373f87f45b0a7a954b82bdf36d978a4fa0e6834f41b5096204a6fe2ef.exe"
1⤵
PID:556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 556 -s 504
  2⤵
  - Program crash
  PID:3464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 556 -ip 556
1⤵
PID:3888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/556-132-0x0000000000720000-0x000000000074D000-memory.dmp

Filesize
180KB

Download