Analysis
-
max time kernel
1s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
04-07-2023 12:09
Behavioral task
behavioral1
Sample
2428610x00000000004000000.exe
Resource
win7-20230703-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2428610x00000000004000000.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2428610x00000000004000000.exe
-
Size
260KB
-
MD5
1be3e15d2c4af636557cb23e11d44b7a
-
SHA1
e65067cdf7c49b351bd0e2ea0a744459de14f4c5
-
SHA256
7a31a5ec3b78f72d05a90a2a91889bad9e188110f83e7a052052fe32e71f40df
-
SHA512
a825418e79de056dafd944d9fd91429337564013c81f07e8b1e308f314d2a5e4d9c7c633aa36b57c4e31662123fb7ba29619b9ea73bf08a4c08825ad8c3c4928
-
SSDEEP
3072:gGybM97hOQ/iK2jrOyipV/XbKjvl18ldMSEOHyoaDTDvQ10BR2xTVFZpPEX3aScd:RDthOzj8VzKedMJrVyiR2ZZAaLu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4640 4996 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\2428610x00000000004000000.exe"C:\Users\Admin\AppData\Local\Temp\2428610x00000000004000000.exe"1⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 842⤵
- Program crash
PID:4640
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4996 -ip 49961⤵PID:3220