Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
17-07-2023 00:30
Behavioral task
behavioral1
Sample
2160-93-0x0000000000360000-0x00000000003EC000-memory.exe
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2160-93-0x0000000000360000-0x00000000003EC000-memory.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2160-93-0x0000000000360000-0x00000000003EC000-memory.exe
-
Size
560KB
-
MD5
d7fff888f4215d68cc20e501fe45e1eb
-
SHA1
a35dbf19b13bcc2323724f742ba35b1591cc342d
-
SHA256
e0b6a88284f4e9e0f63b1d46cae738bc8689c7e04d3db3c24190d026a2f77b87
-
SHA512
948053e5e73934ab9800297debad1daa1cb7eff0663a16df07720016ead43094376d04e5ed104d55ce9a9a63cf6900ddce53851d6c219a383ec36f6adfb93dad
-
SSDEEP
12288:pWe4sWsHS+E1xPc2t59ffXZB2bwakfUwQ5C/Oc3y:pWRs37wPc2tTPZi43y
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3320 2932 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2160-93-0x0000000000360000-0x00000000003EC000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2160-93-0x0000000000360000-0x00000000003EC000-memory.exe"1⤵PID:2932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2932 -s 2242⤵
- Program crash
PID:3320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2932 -ip 29321⤵PID:4060