Analysis
- max time kernel
90s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
10/01/2023, 01:44
Static task
static1
Behavioral task
behavioral1
Sample
f9048d04fca307c7d99e959f137c350e2c02a545.exe
Resource
win7-20221111-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9048d04fca307c7d99e959f137c350e2c02a545.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target f9048d04fca307c7d99e959f137c350e2c02a545.exe
- Size 408KB
- Sample230110-b5vedacb5v
- SHA256 48b52feb153a88d015efa92949004958ae6c0afe42b0d54c3fcf24c407d171bf
- MD5 33eb3c56f9e27bfcd1c2eabdcd068c1c
- SHA1 f9048d04fca307c7d99e959f137c350e2c02a545
- SHA512 a5f34124db697cd6b295395d5e11586e5ea970977fcec9c0e76a407ac992d872210f2d28f173ddec67c71e02e32160eb9ffbe3708dcbcf6a15983ab8a178b854
- SSDEEP 6144:NNs0RWFPRmDLpMDbr5Yz9YZh3S21XbLuQ1DKjL/xPA96QZ3Mi9fYTidHR8/Et5ej:NOPoKKotnNbcbGRl1fOsCAReci+s
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 804 4032 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9048d04fca307c7d99e959f137c350e2c02a545.exe"C:\Users\Admin\AppData\Local\Temp\f9048d04fca307c7d99e959f137c350e2c02a545.exe"1⤵PID:4032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 4882⤵
- Program crash
PID:804
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4032 -ip 40321⤵PID:5048