Analysis
-
max time kernel
91s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
24-05-2022 02:21
Static task
static1
Behavioral task
behavioral1
Sample
5036-137-0x0000000000400000-0x0000000000439000-memory.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5036-137-0x0000000000400000-0x0000000000439000-memory.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
5036-137-0x0000000000400000-0x0000000000439000-memory.exe
-
Size
228KB
-
MD5
b2af155a7e6720b69667d3b0b921e344
-
SHA1
8cc21c48cc1953778d4ab8753c834440d868f821
-
SHA256
ff1f65c2fa21b56d22d76816dee0522e5fb9547c76e808db3d37c4d729dd1514
-
SHA512
a07e335679cd8065d15a957bff2aabf432298e0927cd96c0ee0f0242cec347b7d2212e564064d7af500c8cd33f4e203681652caeefbdd96c733d040a7055babd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4804 4860 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\5036-137-0x0000000000400000-0x0000000000439000-memory.exe"C:\Users\Admin\AppData\Local\Temp\5036-137-0x0000000000400000-0x0000000000439000-memory.exe"1⤵PID:4860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4860 -s 802⤵
- Program crash
PID:4804
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4860 -ip 48601⤵PID:4256