Analysis
-
max time kernel
149s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
08-08-2022 06:40
Behavioral task
behavioral1
Sample
520-173-0x0000000000400000-0x0000000002C16000-memory.exe
Resource
win7-20220718-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
520-173-0x0000000000400000-0x0000000002C16000-memory.exe
Resource
win10v2004-20220721-en
1 signatures
150 seconds
General
-
Target
520-173-0x0000000000400000-0x0000000002C16000-memory.exe
-
Size
40.1MB
-
MD5
5e21c7e06de7c2dc242323f9158031b8
-
SHA1
6f2ed13e64f6170a99c202de7ce07252c15ff3ae
-
SHA256
cdb701e25d8a72bfd588cc5ceaa054fe125293b20f53bdc95107ea9e94f8cb83
-
SHA512
141e858b2b820281430ef9b3b45504a40d14a2f5ed06c303294537cb455d26d3801da35c3f015e37baf12498775704fa53ba415428f3c2cbf09328087ec7dd5d
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 832 1732 WerFault.exe 520-173-0x0000000000400000-0x0000000002C16000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\520-173-0x0000000000400000-0x0000000002C16000-memory.exe"C:\Users\Admin\AppData\Local\Temp\520-173-0x0000000000400000-0x0000000002C16000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1732 -ip 17321⤵