19ef108b6ee8dea60a19bf8dcbe0cadbde56a0638cc7cfdc45bf530857e2efe9 | Triage

Analysis

max time kernel
148s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2022 15:55

Sharing

Report Analysis Logs

General

Target

756-70-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

c3fe1aea5937b5991302217cafe1bc37
SHA1

b2469fd75ce7a7b17f29ebb82a94b2d07d0d8a58
SHA256

19ef108b6ee8dea60a19bf8dcbe0cadbde56a0638cc7cfdc45bf530857e2efe9
SHA512

e9a12233d3d95d7724b7a2b7f9c6a6f59d00adcc279b163c956462eb3065279c16d0d13f39a6809dd01d45538638aaa9271540c6ef6474c8c6cc9780419103e2

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2040 4200 WerFault.exe 756-70-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\756-70-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\756-70-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:4200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4200 -s 216
2⤵
- Program crash
PID:2040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4200 -ip 4200
1⤵
PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...