Analysis
-
max time kernel
70s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2022, 00:05 UTC
Behavioral task
behavioral1
Sample
4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe
Resource
win7-20220901-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
General
-
Target
4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe
-
Size
63KB
-
MD5
a16bb4518cbeaadb48221d975a67cd90
-
SHA1
e44ec1205ca29250a3468ec08e909226821ba221
-
SHA256
4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0
-
SHA512
54d47612413e0749f299b31606b4f615bda38eead2b17c623cbe8568d3b755aee016370955970c07030fd35dd543bd06c3f031fe9529614256378417ff5aec3d
-
SSDEEP
1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2lx:MHoLde/OgV432UcP39hXJZn/sx
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2828-132-0x0000000000400000-0x0000000000429000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 4768 2828 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe"C:\Users\Admin\AppData\Local\Temp\4674938ebdcf0c79d0019142f45adb278c4272a40ff21242a7ea3c2b089575b0.exe"1⤵PID:2828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2828 -s 3802⤵
- Program crash
PID:4768
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2828 -ip 28281⤵PID:4908