76ff01d83c6a99d685a1a9e4b2d60c09aa672fc5cbefa80357288bd731e7f086 | Triage

Analysis

max time kernel
133s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-08-2022 10:04

Sharing

Report Analysis Logs

General

Target

1644-69-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

731d3b1fce5c233a016c36c26309666c
SHA1

c31fd9a8da6af94bfe41df4ce138fa87d15e85f4
SHA256

76ff01d83c6a99d685a1a9e4b2d60c09aa672fc5cbefa80357288bd731e7f086
SHA512

932fd9a35bd3549fb1c830b31e5efe8e8de42ed1174562fdc82c1ffaf4bc523baae18eee38b24eeb8f5bb934f25c90e20b408e41b41f7b3289a52338b7e47a6d

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4284 4216 WerFault.exe 1644-69-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1644-69-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1644-69-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:4216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4216 -s 228
2⤵
- Program crash
PID:4284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4216 -ip 4216
1⤵
PID:3308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...