Analysis
- max time kernel
154s - max time network
184s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
07/12/2022, 03:40
Behavioral task
behavioral1
Sample
e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
General
- Target e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf.exe
- Size 332KB
- Sample221207-d8e5zaca76
- SHA256 e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf
- MD5 cccebd168586a80c5487b5484ba10b5c
- SHA1 5ddce6a45510c23b0cb3f9ead6f778f0f53dd781
- SHA512 0e31b3ce23a9f5213713ab44847ee63e6fc2c49027db0cd5bedfcd557911ca548078a75a83d81411972b409681dcfe46438d537b3c43cd484ac55e0f33a606b4
- SSDEEP 6144:QNWFxVdUQWtGK0YswzCYEJTSvbqzTJVnIzke1aXK6XredjzjgtY:VFxwQdK0BwbE06TbIzkecXXXredjAO
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2708-132-0x00000000008A0000-0x0000000000930000-memory.dmp upx behavioral2/memory/2708-134-0x00000000008A0000-0x0000000000930000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 2248 2708 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf.exe"C:\Users\Admin\AppData\Local\Temp\e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf.exe"1⤵PID:2708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 2842⤵
- Program crash
PID:2248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2708 -ip 27081⤵PID:3028