49f23bba52c17eebb7e04e11d52042d8fee8098220a8283693bf7467e02fe674 | Triage

Resubmissions

21-02-2023 11:28

230221-nla8lsge2x 10

15-02-2023 12:25

230215-pl5mwsbf93 10

Analysis

max time kernel
105s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
submitted
21-02-2023 11:28

Sharing

Report Analysis Logs

General

Target

vcomp140.dll

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1952 4624 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcomp140.dll,#1
1⤵
PID:4624

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4624 -s 324
2⤵
- Program crash
PID:1952

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 4624 -ip 4624
1⤵
PID:3584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4624-133-0x000001AC9DD10000-0x000001AC9DD11000-memory.dmp

Filesize
4KB

Download