Analysis
- max time kernel
90s - max time network
107s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
30/10/2022, 04:18
Static task
static1
Behavioral task
behavioral1
Sample
a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173.exe
- Size 41KB
- Sample221030-exaxjsbgd9
- SHA256 a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173
- MD5 927a533c8e211727ca9a8bd13eaa1e20
- SHA1 f245ec92eb5c69677e456544e8b4365c0289ebc7
- SHA512 798025720083aa09a113b0afe485a90e1d2dee1af50d8fde0ffd5a5bd6992be7e30ac0a6d5abd3df3a435db7ef2aec67d5a63ed2b186e93b53133108b359c534
- SSDEEP 768:PFCFqFQiPmyw4dEgDbwcT61N479ksN0nAHIzn02worqtoMm62Oh78x:cFqFQiPmmEGEcTe4msN003zm6Fox
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1788 4896 WerFault.exe 73
Processes
-
C:\Users\Admin\AppData\Local\Temp\a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173.exe"C:\Users\Admin\AppData\Local\Temp\a70897042c7c56a5dd46a4741d781f0487e116100fb4d6a38c3842d72f698173.exe"1⤵PID:4896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4896 -s 4082⤵
- Program crash
PID:1788
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4896 -ip 48961⤵PID:2548