Analysis
-
max time kernel
144s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/03/2023, 04:37
Static task
static1
Behavioral task
behavioral1
Sample
b66a494e070a7eba21120fd98bfe8e60179be499b96b18058299e225747c1f40.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
b66a494e070a7eba21120fd98bfe8e60179be499b96b18058299e225747c1f40.exe
-
Size
751KB
-
MD5
1f3db8af64889c15223ed7de05b86413
-
SHA1
197dc03bb4cf5de05e5011be616f1341ac6a8b2e
-
SHA256
b66a494e070a7eba21120fd98bfe8e60179be499b96b18058299e225747c1f40
-
SHA512
d5eafa092b0aa4144892207c901bb8c4893c0ae96acbe595a5358bb2d01dcd67a9a7d46aaa0cdd5a9200e7f19c5e8e7c68b7291f83eaf785980534820bc77bf8
-
SSDEEP
12288:aLaNfa2/WaU1WuiC+92lVczlKLGmsirZcytYOaLUmMPJGRTwE2+x:aj71HiCq2QwiirZ3qoJTPe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2336 4160 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\b66a494e070a7eba21120fd98bfe8e60179be499b96b18058299e225747c1f40.exe"C:\Users\Admin\AppData\Local\Temp\b66a494e070a7eba21120fd98bfe8e60179be499b96b18058299e225747c1f40.exe"1⤵PID:4160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 11202⤵
- Program crash
PID:2336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4160 -ip 41601⤵PID:3584