Analysis
-
max time kernel
91s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
06-08-2022 23:36
Behavioral task
behavioral1
Sample
1900-62-0x0000000001370000-0x0000000001C02000-memory.exe
Resource
win7-20220715-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1900-62-0x0000000001370000-0x0000000001C02000-memory.exe
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1900-62-0x0000000001370000-0x0000000001C02000-memory.exe
-
Size
8.6MB
-
MD5
051961374e6a42a1208514a531339619
-
SHA1
99ec0920d2f417aa56ad326084eb83ef08e59832
-
SHA256
b5594d6052a550a4de3c2fd8bb25613bf54fcafc169c7ca33573b0cc62da81b1
-
SHA512
4b085c541eaf250741da60c79a3e43649fcea923449f47a5950c73b74d75c3a2d4daf6055e0e70b0398594f9043d2239f774304386e0d598b0496c9de6b41a47
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4380 3176 WerFault.exe 1900-62-0x0000000001370000-0x0000000001C02000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1900-62-0x0000000001370000-0x0000000001C02000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1900-62-0x0000000001370000-0x0000000001C02000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3176 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3176 -ip 31761⤵