df4c0cd1dc82a6a5a642692d52bead8503c9a4434855f4fc2f9ca8584e265e1d | Triage

Analysis

max time kernel
76s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
10-08-2022 11:35

Sharing

Report Analysis Logs

General

Target

5028-137-0x0000000000400000-0x0000000000407000-memory.exe
Size

28KB
MD5

7eb0b86bc4725d56c499939ab06212cf
SHA1

adf2e312a1d7f6794130f0753a4baece85c80f60
SHA256

df4c0cd1dc82a6a5a642692d52bead8503c9a4434855f4fc2f9ca8584e265e1d
SHA512

6f31c85ddcf8a1d26d0a39331034a7aa6dd33b59a343bdc3ca0cb04fdbc5a1180aedb88f261f86d1c071c37e692681cbee5d2f2df1c7d2dd934943b55a90360c

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4812 2232 WerFault.exe 5028-137-0x0000000000400000-0x0000000000407000-memory.exe

C:\Users\Admin\AppData\Local\Temp\5028-137-0x0000000000400000-0x0000000000407000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\5028-137-0x0000000000400000-0x0000000000407000-memory.exe"
1⤵
PID:2232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 220
2⤵
- Program crash
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2232 -ip 2232
1⤵
PID:2616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-130-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download