Analysis
- max time kernel
110s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
02/06/2023, 06:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target file.exe
- Size 327KB
- Sample230602-gva6msae9w
- SHA256 60cddfbddb330df60f176c91ad237af3f8fc392d7bc2f18e1a5f02629ace40ad
- MD5 f2ee5acb39ff7901a91b4bf77b904f01
- SHA1 58b038f23ecd2b9c341dd3ee8484848f27fa980f
- SHA512 53b1a5c0d18e42b5443c2e0f80209805f79238a0867ff3529a7468f6396a08fdb4fb8553dd90dfc7cb4dcdb2e3c8eaafbdad131f3275743ee0fbb60630ab8306
- SSDEEP 6144:i80Roat20EyK84rjA85mpjoA7VFBhIAEtVGpJZx:i7Roat/XW4pjj9e0
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1932 4104 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:4104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 11242⤵
- Program crash
PID:1932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4104 -ip 41041⤵PID:3372