Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2023, 17:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FNGAutoBkpConfig.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
FNGAutoBkpConfig.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
FNGAutoBkpConfig.exe
-
Size
4.3MB
-
MD5
1bb48abd2e16605d5e326791e7214ef3
-
SHA1
d77a31d3b1caaa79563228a00f6fb091d66ce47f
-
SHA256
6d4eeacf8d37b21648019bbcba5c3010b5f2d0907660872de4a9a7287218dac1
-
SHA512
593b05c758549d713ff62a182143723d83a4f7c836178bc3b6847caad6177cfb4d7262fa5752da28901d635f6911900f5b5ec95ad812eb9f8d52839c7a632822
-
SSDEEP
49152:4+1uidtDuLPd+9bLxJGwPbKSDvVUvubFh7ljBmkO3TEaAa1Fell3ILzBOG9NyAp1:4+IsF5LxwwuSJUGeFj1Fe34BOG9Ny1D
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3108 4356 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\FNGAutoBkpConfig.exe"C:\Users\Admin\AppData\Local\Temp\FNGAutoBkpConfig.exe"1⤵PID:4356
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4356 -s 7482⤵
- Program crash
PID:3108
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 360 -p 4356 -ip 43561⤵PID:4112