f2993b35b48c23362145139ce824cb3c5ed12a72bc3869f79f4ac189588ce0c4 | Triage™

Analysis

max time kernel
125s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
02/08/2022, 20:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1484-65-0x0000000000400000-0x0000000000463000-memory.exe
Size 396KB
Sample220802-y2fhdaaff9
SHA256 f2993b35b48c23362145139ce824cb3c5ed12a72bc3869f79f4ac189588ce0c4
MD5 06c08e3852c30b00547bc25033cb67a0
SHA1 6e3c261de8c2e8e4696f0626e8b924ed2f7db0a9
SHA512 ba20871c60b73ba92a2741db9d6545b1ee0f31a4d9e789f122b87e7692abb30d594c4c85570e7277b143e60d490c79a9f23a013e2bd962e12a89bfa56f7b79cd
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2964	1964	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\1484-65-0x0000000000400000-0x0000000000463000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1484-65-0x0000000000400000-0x0000000000463000-memory.exe"
1⤵
PID:1964
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1964 -s 216
  2⤵
  - Program crash
  PID:2964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1964 -ip 1964
1⤵
PID:4052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads