Analysis
- max time kernel
96s - max time network
118s - platform
windows10-2004_x64 - resource
win10v2004-20230221-en - resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system - submitted
28/02/2023, 11:03
Behavioral task
behavioral1
Sample
3968-140-0x0000000000400000-0x000000000055E000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3968-140-0x0000000000400000-0x000000000055E000-memory.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
- Target 3968-140-0x0000000000400000-0x000000000055E000-memory.exe
- Size 1.4MB
- Sample230228-m513psaf9v
- SHA256 7a3343c560b07b539274e973e6cb73b9fa49bee578e2da8afe1a63d4390e28e9
- MD5 3e67eca01da26cdd5f89ab3ab10eef1a
- SHA1 9e2d3eb400aea68f62eb7aae85538f49db2e9fd0
- SHA512 fe9638fe8a35341bfc215b093aaf7e612f9a105ced0c50b688bd93b55b14741a42840d2a5f8715a220cdda21164b00fa9b6a61d77f28a9e7010cba69e33c49e0
- SSDEEP 3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:4NLYdT97JSIFl0QENqF
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2364 2688 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\3968-140-0x0000000000400000-0x000000000055E000-memory.exe"C:\Users\Admin\AppData\Local\Temp\3968-140-0x0000000000400000-0x000000000055E000-memory.exe"1⤵PID:2688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2688 -s 2162⤵
- Program crash
PID:2364
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2688 -ip 26881⤵PID:2988