Analysis
- max time kernel
135s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20230221-en - resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system - submitted
26/04/2023, 19:55
Behavioral task
behavioral1
Sample
896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
- Target 896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
- Size 8.1MB
- Sample230426-ynb8ssbe74
- SHA256 db58db617caa09c02234b26c915c1ebac86401c9a4c67232a671e246f6d79f56
- MD5 4726dc554161614b0f3c29af218db5a4
- SHA1 d533c307fdb2a2df64d296e10b180083dbc94734
- SHA512 2bb4b2f47b1f10df22d3252b5463fde141224a78396a36d3272be41388c330347b86ff18255f52741fc740391db6a01ccf5b4b6c7d4331b0ff2d354564a6d3c3
- SSDEEP 98304:AuzkVEkgxfMgASps5Awk0o9CjMn6hOhPv2qmxq9LYhtRFXSYweFsWxVTqPkuUXqm:DkVET/ps5ADveqH9LkvXoeFv3qcMm
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2120 1960 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe"C:\Users\Admin\AppData\Local\Temp\896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe"1⤵PID:1960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 2362⤵
- Program crash
PID:2120
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1960 -ip 19601⤵PID:4196