8527ae756272980c06555049e8be3d9393475ba4aca16b07be61b4edc5f50581 | Triage

Analysis

max time kernel
122s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2022 13:51

Sharing

Report Analysis Logs

General

Target

1676-185-0x0000000000400000-0x0000000002BD7000-memory.exe
Size

39.8MB
MD5

f2a4e9b07be9a67bbbccf6d022aa559c
SHA1

49d92176acc1ce25600311b4fa2ea2e379874f8d
SHA256

8527ae756272980c06555049e8be3d9393475ba4aca16b07be61b4edc5f50581
SHA512

c48e68e215543dd1afde7fef5d074ea7e3b97a818fa7614468a4b891e6951f8c359154b03d6b3f47f07d418e3fc8e281e4e47aa043b5483e60da71c27b75f7e8

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3484 1984 WerFault.exe 1676-185-0x0000000000400000-0x0000000002BD7000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1676-185-0x0000000000400000-0x0000000002BD7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1676-185-0x0000000000400000-0x0000000002BD7000-memory.exe"
1⤵
PID:1984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1984 -s 216
2⤵
- Program crash
PID:3484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1984 -ip 1984
1⤵
PID:4432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...