Analysis
- max time kernel
177s - max time network
200s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
11/05/2022, 16:23
Static task
static1
Behavioral task
behavioral1
Sample
HEy0BaVJ6WUy6aM.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
HEy0BaVJ6WUy6aM.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target HEy0BaVJ6WUy6aM.exe
- Size 493KB
- Sample220511-tvsf5sffcj
- SHA256 f35385a0d3cb6488819b0e2c14ed6d97de7f01bbdb08c8fb198218837883b734
- MD5 257eab0847319dafe9522c7b4a6a8e67
- SHA1 bf2c144513911fd1962ed8493294e7ed19586d23
- SHA512 14fdbf17b3a21f17a13f8d37b9cd7b72e3764aeb3b23ccda8b4871201b86a746139d1e8755276b19fe7e63b569179f06367205d8d6196ef2f8e3883faece41d8
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1612 4744 WerFault.exe 18
Processes
-
C:\Users\Admin\AppData\Local\Temp\HEy0BaVJ6WUy6aM.exe"C:\Users\Admin\AppData\Local\Temp\HEy0BaVJ6WUy6aM.exe"1⤵PID:4744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 11962⤵
- Program crash
PID:1612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4744 -ip 47441⤵PID:1464