Analysis
-
max time kernel
98s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
18-03-2023 11:53
Behavioral task
behavioral1
Sample
1720-238-0x00000000001D0000-0x0000000000202000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1720-238-0x00000000001D0000-0x0000000000202000-memory.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
1720-238-0x00000000001D0000-0x0000000000202000-memory.exe
-
Size
200KB
-
MD5
c8d372753ef43ee2dfb48aaa993ad40e
-
SHA1
421bdbf7047d8dd71d998364e6c79cf8386397e5
-
SHA256
fc080e4cb30f26aaa1d7da32aef4570a4ec5eb94029558995e2f8c231dddb7f4
-
SHA512
b4372fa28c541f57986c522d2495b8a5f9716ee4b78d311bbf8dc45416009de5f9fbfb2a038b0be1a460e975625fdefe6eaf809d8917378ca7949aa2389992b8
-
SSDEEP
3072:cxqZWpZaPkOQ3xxW3l0weBFFuh/6xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOi:yqZwxxW1Cuh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2108 2636 WerFault.exe 1720-238-0x00000000001D0000-0x0000000000202000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1720-238-0x00000000001D0000-0x0000000000202000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1720-238-0x00000000001D0000-0x0000000000202000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2636 -s 2242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2636 -ip 26361⤵