Analysis
-
max time kernel
91s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16/12/2022, 12:26
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
file.exe
-
Size
1.3MB
-
MD5
94291b52692122ab90b75b90707ca062
-
SHA1
4ef14839102959f7b63b2988379f3aa0408c6cc4
-
SHA256
c0178dc0e1f125da7b6bab419edc783fdff63a376019140e086e6bc10ec588bd
-
SHA512
eba0b83e69eee6c49ad3e8ed9d1955ff3f87b8637d04d0610d0a4605974415ed45fd83dc910ed335290c01908db3cd8fe81bbcf15c989978e448dff5acc81a44
-
SSDEEP
24576:Nul96k3/hS8anVFj9vMzQo3SSH3PujZCg7EuRsQ8rRs8FN/MvV18fkWf:H18aVFj9vRo3vHfIUgTRsQ8rK8LktGss
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4512 4828 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:4828
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4828 -s 2802⤵
- Program crash
PID:4512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4828 -ip 48281⤵PID:1972