Analysis
- max time kernel
91s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
02/06/2022, 03:33
Static task
static1
Behavioral task
behavioral1
Sample
392-190-0x0000000000400000-0x0000000000420000-memory.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
392-190-0x0000000000400000-0x0000000000420000-memory.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 392-190-0x0000000000400000-0x0000000000420000-memory.exe
- Size 128KB
- Sample220602-d36ezadab3
- SHA256 73aea882ecc1329060d555fd82e9c82716faed311583fe00b8b74f4b890b22f8
- MD5 a6807144a1c97b8abba6d44d7ebba264
- SHA1 ef5e2d9ea67fa2fdcadf51dc4e6c04965d830058
- SHA512 bd9c17a3169231924ecfd07aaa86244a691b06b6f7e2bfd1cd9f23b9aa10350aa98dcb8a06b0b1b52927366e092c0ac9c80312f8f5d483b6b6bd40127858eb03
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3420 4880 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\392-190-0x0000000000400000-0x0000000000420000-memory.exe"C:\Users\Admin\AppData\Local\Temp\392-190-0x0000000000400000-0x0000000000420000-memory.exe"1⤵PID:4880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 2242⤵
- Program crash
PID:3420
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 4880 -ip 48801⤵PID:448