Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
26-04-2023 19:55
Behavioral task
behavioral1
Sample
896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
-
Size
8.1MB
-
MD5
4726dc554161614b0f3c29af218db5a4
-
SHA1
d533c307fdb2a2df64d296e10b180083dbc94734
-
SHA256
db58db617caa09c02234b26c915c1ebac86401c9a4c67232a671e246f6d79f56
-
SHA512
2bb4b2f47b1f10df22d3252b5463fde141224a78396a36d3272be41388c330347b86ff18255f52741fc740391db6a01ccf5b4b6c7d4331b0ff2d354564a6d3c3
-
SSDEEP
98304:AuzkVEkgxfMgASps5Awk0o9CjMn6hOhPv2qmxq9LYhtRFXSYweFsWxVTqPkuUXqm:DkVET/ps5ADveqH9LkvXoeFv3qcMm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2120 1960 WerFault.exe 896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe"C:\Users\Admin\AppData\Local\Temp\896-1251-0x0000000000B90000-0x00000000013B2000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 2362⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1960 -ip 19601⤵