7e6d06f5424093737b32866e419b18a9c9e9493311def0e9b2c8e4158ced4f8d | Triage

Analysis

max time kernel
82s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-08-2022 19:33

Sharing

Report Analysis Logs

General

Target

b986859e09e5eda5c996a7368d75cd63.exe
Size

3.6MB
MD5

b986859e09e5eda5c996a7368d75cd63
SHA1

2c62d02457e5d1ff5e0652047b77d5518b02f1d9
SHA256

7e6d06f5424093737b32866e419b18a9c9e9493311def0e9b2c8e4158ced4f8d
SHA512

3c7b5acb380f5c9aed9046f34acb39e74c5625e047b34ab26262525a53eb44e6a701aaefe5d541f2dd13130f6b801b48271225ccb599b742257f637267f4e9d1
SSDEEP

98304:a9PoBhz1aRxcSUDk36SAEdhvw3R8yAVp2H:a9Pe1Cxcxk3ZAEGR8yc4H

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4620 4696 WerFault.exe b986859e09e5eda5c996a7368d75cd63.exe

C:\Users\Admin\AppData\Local\Temp\b986859e09e5eda5c996a7368d75cd63.exe
"C:\Users\Admin\AppData\Local\Temp\b986859e09e5eda5c996a7368d75cd63.exe"
1⤵
PID:4696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4696 -s 280
2⤵
- Program crash
PID:4620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4696 -ip 4696
1⤵
PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4696-132-0x0000000000400000-0x0000000000A70000-memory.dmp

Filesize
6.4MB

Download
memory/4696-133-0x0000000000400000-0x0000000000A70000-memory.dmp

Filesize
6.4MB

Download