0b23f86ae4f1f0dca1f876b192e9f2c787de6cb0914cc9bf7d6059b642164bbb | Triage™

Analysis

max time kernel
84s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
03/08/2022, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
740-135-0x0000000000400000-0x0000000000462000-memory.exe
Size 392KB
Sample220803-rxzbcsdbar
SHA256 0b23f86ae4f1f0dca1f876b192e9f2c787de6cb0914cc9bf7d6059b642164bbb
MD5 c24616355a88317d04510d78a06f9a6e
SHA1 1e82ea5635a02805bc71469077eb8ce19ff2dc9d
SHA512 ca54fa55ad7f3664f099d211b71dbf4edf7994dac8bddf9caa37b399fd989a1010f1fa2371f073b729e66089393a50219cac1ff1bea74d7dcdde69016fa4379d
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3472	1876	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\740-135-0x0000000000400000-0x0000000000462000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\740-135-0x0000000000400000-0x0000000000462000-memory.exe"
1⤵
PID:1876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 216
  2⤵
  - Program crash
  PID:3472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1876 -ip 1876
1⤵
PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads