f7873fa274928fa4c03c4bcdac0366e97f450d0713c5684c51c1e82cb4a71a1c | Triage

Analysis

max time kernel
106s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2022 04:09

Sharing

Report Analysis Logs

General

Target

1208-54-0x0000000180000000-0x0000000180005000-memory.dll
Size

20KB
MD5

429e06c37198fbb6bab7ad505227060d
SHA1

5eef81fe74824c239533ef155dbcfd5e210a5033
SHA256

f7873fa274928fa4c03c4bcdac0366e97f450d0713c5684c51c1e82cb4a71a1c
SHA512

728020becadf1e3e65a0588e6f5630fe71ea2e067fabe8e8eaaf65df6c471315b69abda12d5b92219258ca86477968895dba7502b368996e74aeb9df92987188

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3552 4060 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1208-54-0x0000000180000000-0x0000000180005000-memory.dll,#1
1⤵
PID:4060

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4060 -s 224
2⤵
- Program crash
PID:3552

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 4060 -ip 4060
1⤵
PID:1816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...