Analysis
-
max time kernel
130s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2023, 18:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
InstallConfig.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
InstallConfig.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
InstallConfig.exe
-
Size
25KB
-
MD5
516cfa6f67d544f2a5ff57b1d547240e
-
SHA1
5e2e012dc1f98a635fe385f197f0376822de03e6
-
SHA256
d093f8335088ef725f954d0a5ee7e545c82b55062630ebb85f67a0ad1b6dad54
-
SHA512
f0fbee77cad7e89ee196a0819aafba439b60ab2e06d9edf2ea98986acd4d7a352eb3f5683e96bb7c3c83cfe923ea8f28a60f2008cba7ec5c2cf15321aa8231ce
-
SSDEEP
384:N6gdSkw9IexWqWbq2ff4DORtHW4SGA1WmfYaex63W+9WvCXdRigG/zcZ7:ouCKbKay9Gm46mEWv0H6zcZ7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4068 4916 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\InstallConfig.exe"C:\Users\Admin\AppData\Local\Temp\InstallConfig.exe"1⤵PID:4916
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4916 -s 7282⤵
- Program crash
PID:4068
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4916 -ip 49161⤵PID:4540