Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/08/2023, 08:08
Behavioral task
behavioral1
Sample
c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de.exe
Resource
win7-20230712-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de.exe
-
Size
11.7MB
-
MD5
27905df44c3e5417e85f1c8b85905195
-
SHA1
86c0fb8a878fed9fbcae4f264bad3adac1eb0af3
-
SHA256
c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de
-
SHA512
754bd739fce43aeda3c320a542fd22aaeaa6335d6c57540a16b48041038239143b79bed64e6214a664409b83e07844133d231b284a03d396b68a631e90b211f5
-
SSDEEP
98304:/bSgGGQgYkuOGGe4scLl4U8PJbDKFvUKFv0s6uipVk:/+gG7gNG7cL+U8xVs6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4320 5100 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de.exe"C:\Users\Admin\AppData\Local\Temp\c587f747cf81414970d686e478205ac073aa51fd765c10149bc68ea7510ad3de.exe"1⤵PID:5100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 2162⤵
- Program crash
PID:4320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 5100 -ip 51001⤵PID:3264