Analysis
-
max time kernel
162s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02/02/2023, 13:38
Static task
static1
Behavioral task
behavioral1
Sample
d96db930c1984bfa82e3cd1844fc227c08bbeb96.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
d96db930c1984bfa82e3cd1844fc227c08bbeb96.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
d96db930c1984bfa82e3cd1844fc227c08bbeb96.exe
-
Size
770KB
-
MD5
555421a36520ed23fa2f6b51e9841e0e
-
SHA1
d96db930c1984bfa82e3cd1844fc227c08bbeb96
-
SHA256
5c4451e32ab7a2e2ab4c040f414b05b829d536ba72099db09199d5aa9af89a38
-
SHA512
52b3b8036cc4821f66bddc470cf5f1bae2747080f31c9ecc48d6306f5fe69aa213bd34a4932a7f38afe5b177751b5427277b31d6c60b6d5999bf710d14606b9e
-
SSDEEP
12288:BdH1YYHO8IzsEXCa6of3zoHBDNW8n4vhKf2elbEI7mMYpza8GsPw9jfoOo7:3H1FVIV6ovzoH3m5i7mde8GsYBfoh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5004 5032 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d96db930c1984bfa82e3cd1844fc227c08bbeb96.exe"C:\Users\Admin\AppData\Local\Temp\d96db930c1984bfa82e3cd1844fc227c08bbeb96.exe"1⤵PID:5032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5032 -s 2522⤵
- Program crash
PID:5004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 5032 -ip 50321⤵PID:3764