Analysis
-
max time kernel
60s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27-03-2023 18:22
Behavioral task
behavioral1
Sample
2568-503-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2568-503-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2568-503-0x0000000000400000-0x000000000046C000-memory.exe
-
Size
432KB
-
MD5
09a4d77c927a4f81d60006ac142ade99
-
SHA1
7dd5438f3146a8ef7142ca013f9e33c2cdc77cc7
-
SHA256
e1b5fac5b2b9a55b6f35fdae571f67d61f9c2452c8dce7a781ca615930198b9e
-
SHA512
8d97c39b7b052b101621f5e4f03e3a9489591f95eeddd554e7b40c709c2d1bf8471a67c4f6b1c38e4a5603be2c4fc577c1c6c8bcabd322b8923c59be5eb2b8ed
-
SSDEEP
6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGizN/9o0wVEhKh+da:cuQRHexo0n24zVK32RRVmGiznwVbh2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1124 1168 WerFault.exe 2568-503-0x0000000000400000-0x000000000046C000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2568-503-0x0000000000400000-0x000000000046C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2568-503-0x0000000000400000-0x000000000046C000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1168 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1168 -ip 11681⤵