Analysis
- max time kernel
7s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
05/07/2023, 11:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e09f421f7d1f8601382ba06f8.exe
Resource
win7-20230621-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
e09f421f7d1f8601382ba06f8.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target e09f421f7d1f8601382ba06f8.exe
- Size 2.4MB
- Sample230705-n4mpcsde9s
- SHA256 e09f421f7d1f8601382ba06f854360dce742321bb0d9b1433374cd1dc7cc4490
- MD5 76172b8704c46cfb5565920279e6f41b
- SHA1 ac3441c0f0e89e64a71c107fbb8ba98994d63b45
- SHA512 ffdd7f195f1b1514a552ad9f718c5b30adbea9341833247924e287ccb71c3c03f652c5b8c52d7c7acdf5fd1172b106716031363b72677e40862893b244c62385
- SSDEEP 49152:2Ry8Fji0FXP4Op3BsiBAi/z95pQJuGi+7dxxcR0h8Pbc+xXXGFbSLWHHOXl:J23BsgL4HOXl
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2680 3540 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\e09f421f7d1f8601382ba06f8.exe"C:\Users\Admin\AppData\Local\Temp\e09f421f7d1f8601382ba06f8.exe"1⤵PID:3540
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3540 -s 5802⤵
- Program crash
PID:2680
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 3540 -ip 35401⤵PID:1200