Analysis
- max time kernel
102s - max time network
105s - platform
windows10-2004_x64 - resource
win10v2004-20230221-en - resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system - submitted
15/03/2023, 11:46
Static task
static1
Behavioral task
behavioral1
Sample
e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ec.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ec.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
- Target e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ec.exe
- Size 185KB
- Sample230315-nxbcrafa5x
- SHA256 e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ecf1d586e4c57b95c487a
- MD5 097d8371eea941a8f7191509d8dc1b69
- SHA1 677c63e800af71b7c2ddad83590cacf06769688f
- SHA512 559e412691ce0c6cbeef6012ebf439a72558627e071376685b24780a5604ef206cf71e35a0f45979916452712eab1004a1da34b19d34120a6a63a3c740530a82
- SSDEEP 3072:+ayvk9/spC5Bi4Fu7tshA0DBqPzDoymAtpO:wvkGpC5Er2qbKAtp
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4016 804 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ec.exe"C:\Users\Admin\AppData\Local\Temp\e7d9c0d2dd8fb7ea26d12bb4ebeff5987ed55ea0fe1ec.exe"1⤵PID:804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 804 -s 10402⤵
- Program crash
PID:4016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 804 -ip 8041⤵PID:3732