Analysis
-
max time kernel
174s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2023 13:30
Static task
static1
Behavioral task
behavioral1
Sample
91392968a944d1ff443f31a0e59dd3f2c1da94b4.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
91392968a944d1ff443f31a0e59dd3f2c1da94b4.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
91392968a944d1ff443f31a0e59dd3f2c1da94b4.exe
-
Size
68KB
-
MD5
4a735cc90eea8aaaf92df9f2d2893342
-
SHA1
91392968a944d1ff443f31a0e59dd3f2c1da94b4
-
SHA256
0e51e817fcbe02f19ea1677bc2d1dc268a9046f8ea997bf0c5b08d912d9e2322
-
SHA512
6a4d60bc81ea15f28b05a8e561eb8f188654aadce1147b1e7f53ec1dcf387a2f7842ceba24194f30e7a1645130499ace27a0433f53bc4af95041f8e2e2a70466
-
SSDEEP
768:tHhp3KX3M+2835mfK6EThh9M3TDpz/XuSInfbsalRtiQTp7NKGVNC7TdjQxntII3:7AX3MhC4LhpySWdVDKwYpwtj3
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 672 4920 WerFault.exe 77 2736 4920 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\91392968a944d1ff443f31a0e59dd3f2c1da94b4.exe"C:\Users\Admin\AppData\Local\Temp\91392968a944d1ff443f31a0e59dd3f2c1da94b4.exe"1⤵PID:4920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 2202⤵
- Program crash
PID:672
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 2402⤵
- Program crash
PID:2736
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4920 -ip 49201⤵PID:636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4920 -ip 49201⤵PID:1628