Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 07:51
Static task
static1
Behavioral task
behavioral1
Sample
21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1.exe
Resource
win7-20221111-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1.exe
-
Size
25KB
-
MD5
2b1da32e97cc3caf85e26ea8be668b80
-
SHA1
02e2210879f65c98aa65ba1d2370804e29003613
-
SHA256
21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1
-
SHA512
6b0c53ec852878335f3fa3d02b8492ce24570ada8d3e2a794fe93df3c3a7a4c42f018bc98ec1b4747d08daf4d7a79ef2d9f2f02c3e09f8e23120ee9d940bf8c0
-
SSDEEP
768:aM7uGxwRMpMabrVaQ/ZvSEh5LLe6qWxfm/5vV9:uGXMabrVNZ5LeAY/5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5028 4644 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1.exe"C:\Users\Admin\AppData\Local\Temp\21de790b2ca2841822b8b385245c657a64d5f2366aab3c14f17de996e500fde1.exe"1⤵PID:4644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4644 -s 3322⤵
- Program crash
PID:5028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4644 -ip 46441⤵PID:4564