Analysis
-
max time kernel
91s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
12-07-2022 12:27
Behavioral task
behavioral1
Sample
1760-70-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1760-70-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
1760-70-0x0000000000400000-0x0000000000433000-memory.exe
-
Size
204KB
-
MD5
a7c739806b898c6e00a974196a5dc749
-
SHA1
f21ae2988484e0e26be8679dc25abe40d121c4fe
-
SHA256
3587d282a5955907aea3104e599189d18f8c3b02a90370915c0b686f939f0c61
-
SHA512
e62250be2e89b2ea507a4585bf59d8229eeaef64dbbbdc90c7ded7221189bcc3c653895ce42e3f5272d861b5f076d9dacdb6c78ffadc0de365977a973c2b18ed
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1136 3144 WerFault.exe 1760-70-0x0000000000400000-0x0000000000433000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1760-70-0x0000000000400000-0x0000000000433000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1760-70-0x0000000000400000-0x0000000000433000-memory.exe"1⤵PID:3144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 2162⤵
- Program crash
PID:1136
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 3144 -ip 31441⤵PID:4140