Analysis
-
max time kernel
93s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
15-03-2023 11:58
Behavioral task
behavioral1
Sample
1048-69-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1048-69-0x0000000000400000-0x00000000004A2000-memory.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1048-69-0x0000000000400000-0x00000000004A2000-memory.exe
-
Size
648KB
-
MD5
782f609d44f099ca161a675547704914
-
SHA1
883fb595d471a44af6015642661a38af2c86df02
-
SHA256
cee7a4df55f5a2c41aa45ea3837968e267870ab57a177f6b37c52881851204b7
-
SHA512
2109c096896cdb9e0fbad7b8c2ef10c337d2c132d3ea4cb0d5a39dfd7599620d615ea28f18402a87dfd3ec8c418acab681e47c289a3c2fb9d4d16b0372757379
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1312 1240 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\1048-69-0x0000000000400000-0x00000000004A2000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1048-69-0x0000000000400000-0x00000000004A2000-memory.exe"1⤵PID:1240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1240 -s 2162⤵
- Program crash
PID:1312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1240 -ip 12401⤵PID:3476