Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
15-05-2022 21:44
Static task
static1
Behavioral task
behavioral1
Sample
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe
-
Size
238KB
-
MD5
fe7f65712ce141ff666b5013f137dbd6
-
SHA1
02dcab6bebd422ff779587780a5b56dfa58c404d
-
SHA256
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797
-
SHA512
cc611b7d164718403828e1cff35c8256f9d9abe0d3978d65719bf024e9634d31e462cd38744972ffe2c004ca86414019a5da35fe2117b56b5beca0d1497c2f47
Score
7/10
Malware Config
Signatures
-
Drops startup file 2 IoCs
Processes:
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bPAfP3n.url 749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bPAfP3n.url 749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe -
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4652 1616 WerFault.exe 749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe"C:\Users\Admin\AppData\Local\Temp\749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797.exe"1⤵
- Drops startup file
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1616 -s 89962⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1616 -ip 16161⤵