Analysis
-
max time kernel
61s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
24-04-2023 00:45
Behavioral task
behavioral1
Sample
3076-473-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3076-473-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3076-473-0x0000000000400000-0x000000000046C000-memory.exe
-
Size
432KB
-
MD5
e18726c12309e5f0f3a148cc16ab4f11
-
SHA1
3b7701a7a7f5751b9b9f9bb672ee1d8b6963d86a
-
SHA256
90e3301b294e929ff02fd421fbfde72558b5983e18f6447f57b0d9710136a4d3
-
SHA512
f9cd26722eafffbbf3e2a713c6b30416bb1363e84b90eb69b4538138af09a7b32388348e8cddd699eec6a3e47b186d3c9283530f4a4dde2016bf6ed556052ca6
-
SSDEEP
6144:z66+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4a3SqdBFJVkShVH:z6HX5aG782ook65G/id5CV53vZVk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4464 3304 WerFault.exe 3076-473-0x0000000000400000-0x000000000046C000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3076-473-0x0000000000400000-0x000000000046C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\3076-473-0x0000000000400000-0x000000000046C000-memory.exe"1⤵PID:3304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3304 -s 2202⤵
- Program crash
PID:4464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3304 -ip 33041⤵PID:4388