Analysis
-
max time kernel
116s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
12-01-2023 19:00
Static task
static1
Behavioral task
behavioral1
Sample
139ea7d22e38a9f4894f06dcb5286aa42de41297.exe
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
139ea7d22e38a9f4894f06dcb5286aa42de41297.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
139ea7d22e38a9f4894f06dcb5286aa42de41297.exe
-
Size
52KB
-
MD5
84fd7094e873bdda344332401b76dfa9
-
SHA1
139ea7d22e38a9f4894f06dcb5286aa42de41297
-
SHA256
9e41cfc0982f5b467ce59e8fe10d40bdbbcafcf188bedeac1152cc976e7be755
-
SHA512
ef4eec540a54a54aa0e8ac3fba0e9d800d35b542389713b1651d80fc4ca541860c9bdaf9d2ace488f8ca4d542230cd57300f067240aa3bc4417a88f28be53342
-
SSDEEP
768:OC4hVOuFRRsuMwDzhuzSfUMtZIUSbY0EEgY2iV/UPHNKyWNe63cSHIdk:KzRpMwDzhpLfi+hdSoO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1620 2876 WerFault.exe 73
Processes
-
C:\Users\Admin\AppData\Local\Temp\139ea7d22e38a9f4894f06dcb5286aa42de41297.exe"C:\Users\Admin\AppData\Local\Temp\139ea7d22e38a9f4894f06dcb5286aa42de41297.exe"1⤵PID:2876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2876 -s 4922⤵
- Program crash
PID:1620
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2876 -ip 28761⤵PID:4904