Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2023, 02:14
Static task
static1
Behavioral task
behavioral1
Sample
edbe47610d8e80819c54903cabbd1a219d6df3fe.exe
Resource
win7-20221111-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
edbe47610d8e80819c54903cabbd1a219d6df3fe.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
edbe47610d8e80819c54903cabbd1a219d6df3fe.exe
-
Size
393KB
-
MD5
eabeb3d579959fe441177ee13cebafae
-
SHA1
edbe47610d8e80819c54903cabbd1a219d6df3fe
-
SHA256
f841eb459bd774e42c9c93a48ba337df1dce47b4bd69b476dc2ba54c0caae4d3
-
SHA512
151ba6030b5de6e7931617167d81c019943ace5b72f50e70f6c936e97f76eac20a1b7f9ac3412951882d7f0edd73ad1110febe384c2e8f5fdffb6f1c7ad8dd45
-
SSDEEP
12288:iyJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDD9UM:iyJOfWwWGzUrbOYDz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1580 5100 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\edbe47610d8e80819c54903cabbd1a219d6df3fe.exe"C:\Users\Admin\AppData\Local\Temp\edbe47610d8e80819c54903cabbd1a219d6df3fe.exe"1⤵PID:5100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 3682⤵
- Program crash
PID:1580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5100 -ip 51001⤵PID:1516