Analysis
-
max time kernel
112s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 05:28
Behavioral task
behavioral1
Sample
9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f.exe
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
General
-
Target
9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f.exe
-
Size
171KB
-
MD5
3c3982c2b877ef3f8c37bc55b754eb27
-
SHA1
a44484e7a77b354b6feba8590010589c42fc4a1c
-
SHA256
9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f
-
SHA512
fe144d51a8e7b4a86307ee9b2e5849719d914cc1f3105b70f95345241dd2eab4fbd189f425fac837f0118eef3c83b0d1f15a0d19e32bb0bf6b2297729db000d2
-
SSDEEP
3072:zZRDYeSVM8IRSAVX1qMgEpgv8sH+aO1D6aBya21qw2QuUX2FsnE/:LDkVM7SAPNg/Hk1/ByvUw2eo/
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5068-132-0x0000000001000000-0x000000000106B000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 1948 5068 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f.exe"C:\Users\Admin\AppData\Local\Temp\9b5ac33078875fb32835f7edb9a9b9deabd1917a9c7b38b441d034b38213865f.exe"1⤵PID:5068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5068 -s 2962⤵
- Program crash
PID:1948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5068 -ip 50681⤵PID:3628