Analysis
-
max time kernel
52s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
31-03-2023 21:30
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
out.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
out.exe
-
Size
241KB
-
MD5
e3f41be419e9d47dd3fcab16d7f2beeb
-
SHA1
1193ba0e8c3cdd603e7f6c3cd5bab4e738a37db5
-
SHA256
986967e8d0ff9f4e4029fe1ca3fa8bbc294089ae00deb0965b8c8d447d03f662
-
SHA512
fd618233a8a49edde8bdde327dbf893cdca91c1a6f65ba4651fb77b484118d84bec93ff0962d41e5fc50178e3c6a1bae4e8e7082d87f3997e51a239233a2fd4d
-
SSDEEP
3072:A+xuRz0TFo/X10Q6T/bql41lkgDR/X10Q6T:HTFo/Fm/H15DR/Fm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2932 4608 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:4608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4608 -s 2202⤵
- Program crash
PID:2932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4608 -ip 46081⤵PID:3200