Analysis
- max time kernel
119s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2022, 04:21
Static task
static1
Behavioral task
behavioral1
Sample
e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029.exe
- Size 211KB
- Sample221107-eyzbjagdf7
- SHA256 e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029
- MD5 0f09ba96e17bdcfe6ada5b4b4e3c203b
- SHA1 5c76bafbf65aa1cebfa4ba585bd4ea060ca0d9b9
- SHA512 a40f967ddd1204bb5d39142897df190b8b8245948c01da6abe6abc9eb20677a644544c54dab1ece80f2153a9992b78a89c2ca65dff5a15b100ed4e48a631d269
- SSDEEP 6144:nBAwvYvaXY0EMRL6AxJiahBznhWJ5fahoP:nGOYvavVThhnh0bP
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4808 4904 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029.exe"C:\Users\Admin\AppData\Local\Temp\e1670f89cb3d3b23915be51fae0f40a3a406a55ff8cc767c82cb1c65f9d41029.exe"1⤵PID:4904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4904 -s 5242⤵
- Program crash
PID:4808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 4904 -ip 49041⤵PID:4828