Analysis
-
max time kernel
142s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2023 13:27
Behavioral task
behavioral1
Sample
2560-62-0x0000000000400000-0x0000000000441000-memory.exe
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2560-62-0x0000000000400000-0x0000000000441000-memory.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2560-62-0x0000000000400000-0x0000000000441000-memory.exe
-
Size
260KB
-
MD5
fc7005022e96573a5bda3ccecf5035c5
-
SHA1
264354119e52e48fc1303ae88d902691adb81494
-
SHA256
1c0a802cac69b19a798aa5436f5ba4142ce9693b57496209db2a5fa49a2f6e83
-
SHA512
24fe3a45b0210eede394e9e9316548e706d724712fbebbae2e473b99b66cf89cb9cc7dd50305fa25fd3a528465785d9f740315bd45e7a55449cda447b2193cc6
-
SSDEEP
3072:4GybM97hOQ/iK2jrOyipV/XbKjv118lyJ00UrmhRZt1mMUrm2viOThV6BvpDX6Xd:pDthOzj8VzKuyVmMUrXiMhVgp2FBO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3520 4120 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2560-62-0x0000000000400000-0x0000000000441000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2560-62-0x0000000000400000-0x0000000000441000-memory.exe"1⤵PID:4120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4120 -s 842⤵
- Program crash
PID:3520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4120 -ip 41201⤵PID:2332