Analysis
-
max time kernel
112s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
20-05-2022 03:43
Static task
static1
Behavioral task
behavioral1
Sample
1536-61-0x0000000000400000-0x000000000041C000-memory.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1536-61-0x0000000000400000-0x000000000041C000-memory.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
1536-61-0x0000000000400000-0x000000000041C000-memory.exe
-
Size
112KB
-
MD5
dbb1101eaf0e8b1a84d21e0d077bd5fd
-
SHA1
d5c7029f186861745004c6123c52ea9db4e73c6f
-
SHA256
bb949e947c15c542607b1cc54c8d4eb33a05571e0813cfc14d4fc137bf11064a
-
SHA512
0ae2119f682ea26218bc94b62ea957b943d4b099f6ce0ddbc2fd51949bf38095478b5cfc3f2174ffcde7ec9e4581c454d301f2e98275dbe376fc984f7d706cd5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3464 4908 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\1536-61-0x0000000000400000-0x000000000041C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1536-61-0x0000000000400000-0x000000000041C000-memory.exe"1⤵PID:4908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4908 -s 2202⤵
- Program crash
PID:3464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 4908 -ip 49081⤵PID:4100