Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
05-07-2022 05:43
Static task
static1
Behavioral task
behavioral1
Sample
896-72-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
896-72-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
896-72-0x0000000000400000-0x00000000004A2000-memory.exe
-
Size
648KB
-
MD5
5f0b419fcbbdfb51e32b42cb2d7449cb
-
SHA1
a2bf12124597115d76378bb4054143c703d77804
-
SHA256
b62b2ccf73bd0d2bd04048aa632e7ecfae41a0ec48acdf14473bb3f9c802dbd4
-
SHA512
7f9ebdd3dc056869906f2d15810345ffa659f4350e00dbe3b26b12c3309a5337f558334e52d5f18bc99a7ca71bcb9484e3c3e55569e47856ac34e32c1cb8ab63
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1276 4988 WerFault.exe 896-72-0x0000000000400000-0x00000000004A2000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\896-72-0x0000000000400000-0x00000000004A2000-memory.exe"C:\Users\Admin\AppData\Local\Temp\896-72-0x0000000000400000-0x00000000004A2000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4988 -ip 49881⤵