Analysis
-
max time kernel
63s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27-02-2023 01:37
Behavioral task
behavioral1
Sample
9ec8468dd4a81b0b35c499b31e67375e.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ec8468dd4a81b0b35c499b31e67375e.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
9ec8468dd4a81b0b35c499b31e67375e.exe
-
Size
624KB
-
MD5
9ec8468dd4a81b0b35c499b31e67375e
-
SHA1
6fa04992c0624c7aa3ca80da6a30e6de91226a16
-
SHA256
cda9310715b7a12f47b7c134260d5ff9200c147fc1d05f030e507e57e3582327
-
SHA512
bd6b37a0395f0ae508c54dcb62d5258adfb8c202605db8310c6b8758c3874bd2364491b1b129209ba1854df27f35149f891ac785a89fe26ddc45c40cad8023b2
-
SSDEEP
12288:CpCB9AVqhPDUHvOdO21ai1m2Y+o1mQR5LaVfnkBUxarLIN8Wah5/wodPdv7PVTFe:Cp12UPQkBUO/B5/lzTVTFH+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2228 4080 WerFault.exe 9ec8468dd4a81b0b35c499b31e67375e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ec8468dd4a81b0b35c499b31e67375e.exe"C:\Users\Admin\AppData\Local\Temp\9ec8468dd4a81b0b35c499b31e67375e.exe"1⤵PID:4080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4080 -s 4762⤵
- Program crash
PID:2228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 4080 -ip 40801⤵PID:644