6d84e678810bd95fca73f9ca132b8f8748da8440a45a33bd8923ffe10d26eadb | Triage

Analysis

max time kernel
63s
max time network
71s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-09-2022 21:17

Sharing

Report Analysis Logs

General

Target

out.exe
Size

3.8MB
MD5

c6baffc3f78783d0f39aa362a1f549f5
SHA1

c904fe72f4cfb42c12ac2869c385a66061023feb
SHA256

8a3e46e4ed2c6740243393f8b94efabc1e183ef4be2079559a63c67b94aa6463
SHA512

f21ac5a55cb297656c4ef75dd63fdda3de30c9074bb3b7a5afb0de8a62217104f49e7c8b7295c24df7899932e5f3d598ab59319a3bf2886a941f86c39ea6e2fe
SSDEEP

98304:m77Pmq33rE/JDLPWZADUGer7B6iY74M/jmlwXVZ:Y+R/eZADUXR

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1044 4372 WerFault.exe out.exe

C:\Users\Admin\AppData\Local\Temp\out.exe
"C:\Users\Admin\AppData\Local\Temp\out.exe"
1⤵
PID:4372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4372 -s 224
2⤵
- Program crash
PID:1044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4372 -ip 4372
1⤵
PID:4740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...