Analysis
-
max time kernel
138s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
08/05/2022, 08:17
Static task
static1
Behavioral task
behavioral1
Sample
848-54-0x0000000000400000-0x000000000043D000-memory.exe
Resource
win7-20220414-en
0 signatures
0 seconds
General
-
Target
848-54-0x0000000000400000-0x000000000043D000-memory.exe
-
Size
244KB
-
MD5
453da41c46f480ea857149985eeb9ba3
-
SHA1
d58e5f7673fba334632f558f89fae3386cba8ab4
-
SHA256
0d2c048dfb35513814ac9c6ac4760821581b765960f26d9b23dfdd5604721274
-
SHA512
46eb00262b8b7e8b1c5c6b865f127fa6860c9d17332ac201fb9620d40df922d9496914218fd487fc37c11f388b7641d5e5b44feec832548646853e4a9e181dd6
Malware Config
Processes
-
C:\Users\Admin\AppData\Local\Temp\848-54-0x0000000000400000-0x000000000043D000-memory.exe"C:\Users\Admin\AppData\Local\Temp\848-54-0x0000000000400000-0x000000000043D000-memory.exe"1⤵PID:1032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1032 -ip 10321⤵PID:2288