Analysis
-
max time kernel
136s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
18/05/2023, 13:48
Behavioral task
behavioral1
Sample
20230517b549a40b7426410c3cc3145e56ac24edgandcrab.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
20230517b549a40b7426410c3cc3145e56ac24edgandcrab.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
20230517b549a40b7426410c3cc3145e56ac24edgandcrab.exe
-
Size
155KB
-
MD5
b549a40b7426410c3cc3145e56ac24ed
-
SHA1
a5a2722ff785eb08c543f316fb3ec93272f55674
-
SHA256
001e9cb57f9e922d7b0d92ec43b8b5e376c5ab6e4ea827b84c76e13c994fbbea
-
SHA512
0cb1449f646ba2339b53e8ea9ec7074766ccd288b2facb59377452365aa57a7867bd22b2f66e3a6591e704bd376bfe5b771bd9b903f1cb8ac48f00836adc85e9
-
SSDEEP
3072:S5K/B0toLbQSNJhlxwsx89TSdBgjMqqDL2/TOKOPG:ScytwbtcTTSdBgQqqDL6SKT
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3536 1548 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\20230517b549a40b7426410c3cc3145e56ac24edgandcrab.exe"C:\Users\Admin\AppData\Local\Temp\20230517b549a40b7426410c3cc3145e56ac24edgandcrab.exe"1⤵PID:1548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 2522⤵
- Program crash
PID:3536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1548 -ip 15481⤵PID:748