Analysis
-
max time kernel
127s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2023 09:18
Behavioral task
behavioral1
Sample
a87ecbb3d32265exeexeexeex.exe
Resource
win7-20230703-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a87ecbb3d32265exeexeexeex.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a87ecbb3d32265exeexeexeex.exe
-
Size
155KB
-
MD5
a87ecbb3d322657c344089ea132ba00e
-
SHA1
0dc5489525586df1cee7fd74ee96b96358d16abf
-
SHA256
717c31866083b19d89a9c679d843e47f2332396dcfd7e8ca446eb87abc411853
-
SHA512
64508273136143444347bd89e005bc75349e68047593ce8d7b290582393f087f9ebdab52f1d2c9dad728dad23bae40f826516739d86dcf0a0c6a9bcbefe0687c
-
SSDEEP
3072:S5K/B0toLQSNJUlxwsx89TSdBgjMqqDL2/TOKygG:ScytwtHTTSdBgQqqDL6SKk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 528 4880 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\a87ecbb3d32265exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\a87ecbb3d32265exeexeexeex.exe"1⤵PID:4880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 2642⤵
- Program crash
PID:528
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4880 -ip 48801⤵PID:1836