Analysis
- max time kernel
143s - max time network
121s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
15/03/2023, 15:36
Behavioral task
behavioral1
Sample
1384-135-0x0000000000400000-0x0000000002B0F000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1384-135-0x0000000000400000-0x0000000002B0F000-memory.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target 1384-135-0x0000000000400000-0x0000000002B0F000-memory.exe
- Size 39.1MB
- Sample230315-s2bljaea55
- SHA256 2c2b8c084c1ce33466fef40569a0da18ee4ab40575073ace814eabe0670d5e6e
- MD5 214b5590338ae62170315a6e449016b6
- SHA1 c96adddb2fd7692145f45af5fc03ce99e6a1628e
- SHA512 73efebc229ff4258fb17dfc3b3fbb581556570775d82c720e3da03e7d8efaf79c5ddfe965bd9b2309f2fdb28efb8d03dc8a727988320ce9784557051b8352322
- SSDEEP 3072:KfKnmGDN0K3vMUZr2BDhW8c/S9OC1hE/uJuP8QrW78Nlfo:0KmGDB3vCpR9p02p9ce
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4008 1000 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\1384-135-0x0000000000400000-0x0000000002B0F000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1384-135-0x0000000000400000-0x0000000002B0F000-memory.exe"1⤵PID:1000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1000 -s 2162⤵
- Program crash
PID:4008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1000 -ip 10001⤵PID:2044