4af354a54e5af1b5f7d10ea06bc2d47d42d1e4b0f9eae1f380479076cd76eea3 | Triage

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2023 08:12

Sharing

Report Analysis Logs

General

Target

wuaueng.dll
Size

3.3MB
MD5

7f6e71ac4096f45c968f8990af6768c3
SHA1

0a113636a214971996c25b43472ba1be310f9f57
SHA256

4af354a54e5af1b5f7d10ea06bc2d47d42d1e4b0f9eae1f380479076cd76eea3
SHA512

6dc1b639b3014b18d010bef0bc6c04c9d32a7601af7dc4b7851e54827a79a9c671b05a802cffa818f48202975275392d4552215f0faf4c5c4583e4598c818a9a
SSDEEP

49152:F0ODNuls5T+qWX3Y8oLsjgFRX2V7bEF9YKThC1F+hNFy9KGJioQa:hnT+U/CQlQJT

Score

3^/10

Malware Config

Signatures

Program crash 4 IoCs

pid	pid_target	Process	procid_target
3752	1452	WerFault.exe	89
1268	224	WerFault.exe	93
4820	1648	WerFault.exe	96
3884	2364	WerFault.exe	99

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\wuaueng.dll,#1
1⤵
PID:4408

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 1452 -ip 1452
1⤵
PID:4404

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1452 -s 632
1⤵
- Program crash
PID:3752

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 224 -ip 224
1⤵
PID:3388

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 224 -s 620
1⤵
- Program crash
PID:1268

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 576 -p 1648 -ip 1648
1⤵
PID:2004

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1648 -s 620
1⤵
- Program crash
PID:4820

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 540 -p 2364 -ip 2364
1⤵
PID:4892

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2364 -s 612
1⤵
- Program crash
PID:3884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads