Analysis
- max time kernel
945s - max time network
948s - platform
windows10-2004_x64 - resource
win10v2004-20220414-es - submitted
23/04/2022, 06:02
Static task
static1
Behavioral task
behavioral1
Sample
good.exe
Resource
win10v2004-20220414-es
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
out.exe
Resource
win10v2004-20220414-es
0 signatures
0 seconds
General
- Target out.exe
- Size 266KB
- Sample220423-grslhsaff8
- SHA256 7f12d8502c88112a227dd460e61a24f5c363f4bb8fec0f72ed432ead21842fb6
- MD5 d501947d4aa37f0b20d0280027f88d7a
- SHA1 d4d0e6c07e2d0148b7ae9894470b6a861670bcc4
- SHA512 0540d023841600687769c998f268f14c058e30e97224cec05de1a9942a55d2fa71697e80e55511e4be7d65154a8ddd103058dcca6f80b6e53f505d0acf3269aa
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4600 1600 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:1600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1600 -s 2202⤵
- Program crash
PID:4600
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1600 -ip 16001⤵PID:2172