Analysis
-
max time kernel
101s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08/02/2023, 06:13
Behavioral task
behavioral1
Sample
3512-155-0x00000000008A0000-0x00000000008AE000-memory.exe
Resource
win7-20221111-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3512-155-0x00000000008A0000-0x00000000008AE000-memory.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
3512-155-0x00000000008A0000-0x00000000008AE000-memory.exe
-
Size
56KB
-
MD5
2c95056043b445dde441538b81ceb9ad
-
SHA1
d2849ba82f53e4c1509a2f78eaf2435a2826f4d1
-
SHA256
734de1cca18413c4e391f521c1a4a11ed4dd2257cd94cf527bded557debd0fc5
-
SHA512
ed4f08ed15d8b4524e754c6e6a4f99e16fce4619b03897f58fb215d496815cb0ebb487d4a60984f5d26941d2e45a22659077b27fa3bb66bef0e695240fc708ec
-
SSDEEP
768:cTpfQ3WHcxMFAjvZXQruFPu4akfiEmrNX11Uxfef+Sl:MBQ3WHc6ajvjJak6HUfI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1120 4800 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3512-155-0x00000000008A0000-0x00000000008AE000-memory.exe"C:\Users\Admin\AppData\Local\Temp\3512-155-0x00000000008A0000-0x00000000008AE000-memory.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 2162⤵
- Program crash
PID:1120
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4800 -ip 48001⤵PID:4792