2e3af04dc24699991971d77396286097efe746631744d0566d7cb7c375a65298 | Triage

Analysis

max time kernel
78s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2022 13:51

Sharing

Report Analysis Logs

General

Target

852-178-0x0000000000400000-0x0000000002BD7000-memory.exe
Size

39.8MB
MD5

6279b28acc4412e116ef4ea35fee498f
SHA1

99e1f2de569eb9e6c9f6a1999a5a59993e842736
SHA256

2e3af04dc24699991971d77396286097efe746631744d0566d7cb7c375a65298
SHA512

40f9e05318d67e6195a591af9e65cb120e605522a5199aec8b7d918524932f85b79135dffe7237d40b0144e20a20afb905405abfb5da0098d599c8ab7c2fcecd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1780 748 WerFault.exe 852-178-0x0000000000400000-0x0000000002BD7000-memory.exe

C:\Users\Admin\AppData\Local\Temp\852-178-0x0000000000400000-0x0000000002BD7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\852-178-0x0000000000400000-0x0000000002BD7000-memory.exe"
1⤵
PID:748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 748 -s 216
2⤵
- Program crash
PID:1780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 748 -ip 748
1⤵
PID:4592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...