Analysis
- max time kernel
91s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
10/01/2023, 19:02
Behavioral task
behavioral1
Sample
1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target 1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca.exe
- Size 413KB
- Sample230110-xp8sqach9t
- SHA256 1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca
- MD5 1fba8a6f7f7bf75cbe2be7f7c59c9e1b
- SHA1 df4bf6e1a48bad38c7846646479f61e67c80d2ff
- SHA512 3a4de9ce60b0d9bc0d1e62eabf58b0f119be2fa4293ed7e99446f02e19b52644d5b790caa72bc16a7fc9655c15a7aec210d2bbb49fe2b16bd6845efbf2673494
- SSDEEP 6144:9BRveVHCEpTYe55QBJRfaDkFAFMUfIdKQuLMprn3vE:3NE2ef8HA9MULdY/
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1272 4924 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca.exe"C:\Users\Admin\AppData\Local\Temp\1ed680e87202fe43127b8d2507ea9b3774757451f3171bd0fb0cc21e76c0e0ca.exe"1⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 6842⤵
- Program crash
PID:1272
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4924 -ip 49241⤵PID:4984