Analysis
- max time kernel
170s - max time network
186s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
27/11/2022, 22:21
Static task
static1
Behavioral task
behavioral1
Sample
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe
Resource
win7-20221111-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target 8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe
- Size 255KB
- Sample221127-19t2vagg2s
- SHA256 8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d
- MD5 ffbd0491acd18bbe2b319684f054d49a
- SHA1 0d1572458d14a2138231435d310a1bc105badd91
- SHA512 23b2f1582ce6f55712047e0d5f37f1bfea105cf4eba7a4e2e575b87e2c29ec06f99afa10dba06f24b1a5c99b8bd7b778c08e537ff70be15d36be358354f6eadf
- SSDEEP 6144:6cAiBQCjZ/CBdTvLoVSgD9VZ5DtMBfyJy9im0rwl5s5hW6A:bj/ytMVRDTb2py8g7CH
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 2204 3444 WerFault.exe 82 3232 3444 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe"C:\Users\Admin\AppData\Local\Temp\8e417de7faa35b2fd71f536fabf46dea1b7b867a1fa1aa184c63cff917fa258d.exe"1⤵PID:3444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 5282⤵
- Program crash
PID:2204
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3444 -s 5722⤵
- Program crash
PID:3232
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3444 -ip 34441⤵PID:1912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 3444 -ip 34441⤵PID:5008