Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2023, 02:35
Static task
static1
Behavioral task
behavioral1
Sample
1948eee1579871702fcba9e875747694b75529e6.exe
Resource
win7-20220812-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
1948eee1579871702fcba9e875747694b75529e6.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
1948eee1579871702fcba9e875747694b75529e6.exe
-
Size
352KB
-
MD5
bbf52a671a61e8d3be42dbe38ea78f46
-
SHA1
1948eee1579871702fcba9e875747694b75529e6
-
SHA256
6b1b38655872ef1b4adbec4fc9f61e60975f293df152266ed4d720d087c94da1
-
SHA512
60c9304395ca1c436cd14f13a2a195f5e703aee8371c2db3553339659136e5a6083dd75bb5911f83d8606d2df7b8821e6417a7afced41bc24813cf69e09fee49
-
SSDEEP
6144:Ithc3JFPEDaaUB+76EFQrPBxdRoRK5IRPTdmXE6Qd3yTRNc8lGUJ+J5aC:bZFM2aUBI6PDBVsLPd3y1lC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3500 2564 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\1948eee1579871702fcba9e875747694b75529e6.exe"C:\Users\Admin\AppData\Local\Temp\1948eee1579871702fcba9e875747694b75529e6.exe"1⤵PID:2564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2564 -s 2682⤵
- Program crash
PID:3500
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2564 -ip 25641⤵PID:2064