Analysis
-
max time kernel
151s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 17:09
Behavioral task
behavioral1
Sample
8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c.exe
-
Size
248KB
-
MD5
4a0cd52c249128971f59be15b99fb04a
-
SHA1
e5cf634df3cc3cbd04c62a7d3f33739fdafbeb2e
-
SHA256
8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c
-
SHA512
48e224f1f98a144ce9abb163aaeaf349dc4e17e9a25284455c05bc4c7eac4161fcd4f8c9433b1f9ab2e6f64d23e24347474af13773b4f2c83282a75d99f05bcb
-
SSDEEP
6144:kiuykoOfMWo4t2+Y62NL5Y7J0Ms44kIELg/SDBHg4SlJwC8qIh1:JpmfU4cNvc7J0Ms44k9hBl858qIj
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4936 3392 WerFault.exe 80 4052 3392 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c.exe"C:\Users\Admin\AppData\Local\Temp\8fc0d2d0a83f9d332f6183b762a23a3feb2733529443c674c4887277fc5af41c.exe"1⤵PID:3392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3392 -s 7002⤵
- Program crash
PID:4936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3392 -s 7442⤵
- Program crash
PID:4052
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3392 -ip 33921⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 3392 -ip 33921⤵PID:4748