Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2023, 15:55
Behavioral task
behavioral1
Sample
2076610x00000000004000000.exe
Resource
win7-20230703-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2076610x00000000004000000.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
2076610x00000000004000000.exe
-
Size
220KB
-
MD5
cb937649a593a37344eca6256c5e07ad
-
SHA1
fec0b5c7aa02e2849e6f63edfe747da4bbcb22e9
-
SHA256
fd6ed8cea53e92c67c16c0f05db1b51e08d039c271619f7f59b5299b7e87fe75
-
SHA512
1e57182f631e80251108a2bb78369bcd7578df3c3e4a76f99ea5eeb745748161536572442a12ad6694902d07136de11da29d624d83a7efd54725bc8ada00ed2f
-
SSDEEP
3072:4GybM97hOQ/iK2jrOyipV/XbKjvV18lwOOYz212p6+stWhK3b7ZcFwBWjT/gbYN:pDthOzj8VzKOpzOdmIbdWTYb6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4640 3040 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2076610x00000000004000000.exe"C:\Users\Admin\AppData\Local\Temp\2076610x00000000004000000.exe"1⤵PID:3040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 882⤵
- Program crash
PID:4640
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3040 -ip 30401⤵PID:556