Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
05/10/2022, 04:45
Static task
static1
Behavioral task
behavioral1
Sample
2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe
Resource
win10-20220812-en
1 signatures
150 seconds
General
-
Target
2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe
-
Size
4.7MB
-
MD5
d33055b4a90538689523cc97a56ca3be
-
SHA1
d00bb4899a11457e4260e55f689cf31f35923b1c
-
SHA256
2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b
-
SHA512
4a4d5407a1e7403615d033124497e2e0688b9ff95891275dfd929b60030bb2571b0809756d8d0a88f37bd8295472a639309bea4a858f76bc3fc3d9fe29261d4c
-
SSDEEP
98304:m2hwpKO+6PbFmS3VjVEOeTtJaAbLECnrZXJT7:mnbFmS3VjVEOeTtJHbdnrz7
Score
3/10
Malware Config
Signatures
-
Program crash 4 IoCs
pid pid_target Process procid_target 4904 2976 WerFault.exe 65 4964 2976 WerFault.exe 65 4992 2976 WerFault.exe 65 4396 2976 WerFault.exe 65
Processes
-
C:\Users\Admin\AppData\Local\Temp\2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe"C:\Users\Admin\AppData\Local\Temp\2eac5cc12e7a640136ccd19ab57b35a8d66312c4767d4547df7abc040334877b.exe"1⤵PID:2976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 5242⤵
- Program crash
PID:4904
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 5002⤵
- Program crash
PID:4964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 5682⤵
- Program crash
PID:4992
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 6122⤵
- Program crash
PID:4396
-