Behavioral Report

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 11:22

Target

e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff.exe
Size

161KB
MD5

0b0b0a9099db9358b938e79608aa7c74
SHA1

58607dbae259e72052ab18973870f60064ecf8c9
SHA256

e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff
SHA512

024283bf11878c926d9f1409dffe04023dccaf58d4a14bc042817633fc320985a68be9b53f01e532cc0299ff5f3e011ba5652089ee1b44c085ad18c31ee3d101
SSDEEP

3072:+Xrc5WpSlP0sjkMGyrDJAA4uxeWd7QJamw8BtAhE0YR5xHsj8mRU:+Xm8wjfV56Wd7KazstqeBHso

Score

3^/10

Program crash ⋅ 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5060 2284 WerFault.exe e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff.exe

pid	pid_target	process	target process
5060	2284	WerFault.exe	e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff.exe

C:\Users\Admin\AppData\Local\Temp\e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff.exe

"C:\Users\Admin\AppData\Local\Temp\e5ff3e34d5090acc41b2c94858c4041ae1afad0ffb953086937275d8e18191ff.exe"

PID:2284

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2284 -ip 2284

PID:3544

Collection

Command and Control

Credential Access

Defense Evasion

Discovery

Execution

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Privilege Escalation

00:00 00:00