Analysis
-
max time kernel
84s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
31-07-2022 19:22
Static task
static1
Behavioral task
behavioral1
Sample
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
Resource
win7-20220718-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
-
Size
326KB
-
MD5
4d9cb097be72db103d482abb4658685a
-
SHA1
cf1eaf87b24fc59a60db2317f26a5d75809dfd50
-
SHA256
5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4
-
SHA512
072dc309eba55774d63e243b8fe8f22f257fcb74d71da92d98bf625c1caefc6063079c1953eb981aec08065981a5c28de4253c7f0e6dd4db01c8931c320f16cf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4016 4144 WerFault.exe 5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe"C:\Users\Admin\AppData\Local\Temp\5ebe1e850fbff16ed9783155353b33f651938d66c79d01f854fa467a3059fef4.exe"1⤵PID:4144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 3962⤵
- Program crash
PID:4016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4144 -ip 41441⤵PID:4340