Analysis
- max time kernel
91s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
16/12/2022, 12:26
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target file.exe
- Size 1.3MB
- Sample221216-pl66qaef87
- SHA256 c0178dc0e1f125da7b6bab419edc783fdff63a376019140e086e6bc10ec588bd
- MD5 94291b52692122ab90b75b90707ca062
- SHA1 4ef14839102959f7b63b2988379f3aa0408c6cc4
- SHA512 eba0b83e69eee6c49ad3e8ed9d1955ff3f87b8637d04d0610d0a4605974415ed45fd83dc910ed335290c01908db3cd8fe81bbcf15c989978e448dff5acc81a44
- SSDEEP 24576:Nul96k3/hS8anVFj9vMzQo3SSH3PujZCg7EuRsQ8rRs8FN/MvV18fkWf:H18aVFj9vRo3vHfIUgTRsQ8rK8LktGss
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4512 4828 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:4828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4828 -s 2802⤵
- Program crash
PID:4512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4828 -ip 48281⤵PID:1972