Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2023, 07:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e5af4a867e5d94exeexeexeex.exe
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e5af4a867e5d94exeexeexeex.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
e5af4a867e5d94exeexeexeex.exe
-
Size
262KB
-
MD5
e5af4a867e5d94bae9fe0a3d0aad62b4
-
SHA1
cea3cdac7525bb71c084184698137a388f5c83dc
-
SHA256
b8e3ee383ed1efaac5165092fc45194e6302a6f63587076749f84d176e2843bb
-
SHA512
15cc004a85cecf69163b86e926a78ddc664f08f90ce89f1177c49928adaa65a77161517a9f7c0d03531a591be74d50a830a6c636b79733135c4cf732aa74f967
-
SSDEEP
3072:yGpYmsBADBDBPVLRTN57hRuG/Ep4j6k6+5yCD7QhYvpJ3Fnpi1zZBYgmCJR42J1G:T7SGS4jMM1ghupJ3N6n4
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3512 2532 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\e5af4a867e5d94exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\e5af4a867e5d94exeexeexeex.exe"1⤵PID:2532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 5202⤵
- Program crash
PID:3512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2532 -ip 25321⤵PID:2060