Analysis
-
max time kernel
91s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19-10-2022 22:03
Behavioral task
behavioral1
Sample
a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce.exe
Resource
win7-20220901-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce.exe
-
Size
104KB
-
MD5
912e33f92ee801299dd61db5c0348843
-
SHA1
f73ed7e4ddb6ea8384ff783d7d8cd6b82df2a235
-
SHA256
a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce
-
SHA512
d042700e557bc7395d32e7f5a84e9063654dd074e1110e983d37874a0f7ed0ec32506536595a4e6911f8ab313e1ffeff6c4258aa5c6d9e98ea5f14118959a41f
-
SSDEEP
768:Zjh8ixd0BzVqYmf4FUZeNZQEtR1vidJS2lbw7cdwsZCPiROd:Zjh8iQBzVqYT+ZeNZlR1vwH5ZU
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1152-132-0x0000000000400000-0x000000000041A200-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 2200 1152 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce.exe"C:\Users\Admin\AppData\Local\Temp\a3b580a326f0426b583035dbd2b607272e75c28b327b1eb59acab7f8f662d1ce.exe"1⤵PID:1152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 2642⤵
- Program crash
PID:2200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1152 -ip 11521⤵PID:2060