Analysis
- max time kernel
150s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
19/11/2022, 12:39
Behavioral task
behavioral1
Sample
8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590.exe
- Size 754KB
- Sample221119-pvlldafe7y
- SHA256 8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590
- MD5 0562f1140dda735ee1178142cf1bb041
- SHA1 5b57d7b78e55e8221dde88b8bb4d6faad77006d6
- SHA512 77ca60230db21fa8204803e5b0a48c29026fcacb93c7cbd236aaf01cfd2076539fae51f410cff3d19c9a79c98460a4a04d16a0fc0b74178f1c0d97536822435a
- SSDEEP 12288:x9A2lAd0Z+89cxTlzO4AucTD8QP2lmSSrVovu6wKfqMd0QZh9u:HAF6Zx9cxTVOrucTIESSpcLjD0QZh9u
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 748 4972 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590.exe"C:\Users\Admin\AppData\Local\Temp\8a20bc31f7907376b7eddcb4a844a534d37a78dbd628f95128223c573dfe5590.exe"1⤵PID:4972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 6642⤵
- Program crash
PID:748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4972 -ip 49721⤵PID:3928