8e64416f532de6d9ac982aabfb78e0ed69684bb85244eae863856cbe2b07947e | Triage

Analysis

max time kernel
164s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2022 07:28

Sharing

Report Analysis Logs

General

Target

1628-115-0x0000000000400000-0x0000000000522000-memory.exe
Size

1.1MB
MD5

757ed202bab16748ad9f862081f07da8
SHA1

e94fe4ebc4707f209fd1c63da1d52424f8e75a3a
SHA256

8e64416f532de6d9ac982aabfb78e0ed69684bb85244eae863856cbe2b07947e
SHA512

342d86ff1e0f181d360f1a7290ef2b2c8a9dc12bccdd242b9e12ce1ca3e79fc2293bb50b581653159662b6a8917b6a352beab267b5da8ad218f5ad493aefc900

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2484 4480 WerFault.exe 1628-115-0x0000000000400000-0x0000000000522000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1628-115-0x0000000000400000-0x0000000000522000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1628-115-0x0000000000400000-0x0000000000522000-memory.exe"
1⤵
PID:4480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4480 -s 204
2⤵
- Program crash
PID:2484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4480 -ip 4480
1⤵
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...