Analysis
-
max time kernel
147s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728.exe
-
Size
1KB
-
MD5
0cf6c7251e74f6b2c3265fda121e9ede
-
SHA1
db17534e389d4ca26ab277cdcea99057be6c30ed
-
SHA256
67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728
-
SHA512
a1890810390bc5dc129014bffa32ade639353ef36b95d10ed0d101e870149fab3e22a2f57a769b3f8546dec8b5714f31dba643fe1b7c3f9d6b5afb21d888a9b6
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4392 3928 WerFault.exe 80 2992 3928 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728.exe"C:\Users\Admin\AppData\Local\Temp\67264a56e3521de3241ddb298d0113b9602c909e041024addc6a79778b44f728.exe"1⤵PID:3928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3928 -s 2522⤵
- Program crash
PID:4392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3928 -s 2842⤵
- Program crash
PID:2992
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3928 -ip 39281⤵PID:3048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3928 -ip 39281⤵PID:4944