Analysis
-
max time kernel
90s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2022 05:18
Behavioral task
behavioral1
Sample
608-64-0x0000000000400000-0x0000000000414000-memory.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
608-64-0x0000000000400000-0x0000000000414000-memory.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
608-64-0x0000000000400000-0x0000000000414000-memory.exe
-
Size
80KB
-
MD5
e7b5648dfbbeee521615013fcbf7b882
-
SHA1
1c603b082a078fab9d9ce0dccc867b0612ef042a
-
SHA256
012adc98c593d9027980fe45705fefc5b1649c7c658173aa86b3324a54861ca4
-
SHA512
80c795464da1f30922a64447a3158454141c63bbedea02c0747f9fe96d784165dfbe8d50e097f50ab8a69fb7292178af420c56e650bce8d58bcb267079eba122
-
SSDEEP
768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6R:AdMzAzjavO9uG+NNdQ4MGQR
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4824 3248 WerFault.exe 608-64-0x0000000000400000-0x0000000000414000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\608-64-0x0000000000400000-0x0000000000414000-memory.exe"C:\Users\Admin\AppData\Local\Temp\608-64-0x0000000000400000-0x0000000000414000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3248 -s 2202⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3248 -ip 32481⤵