Analysis
- max time kernel
84s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
22/08/2023, 08:10
Behavioral task
behavioral1
Sample
2292-62-0x0000000000400000-0x0000000000425000-memory.exe
Resource
win7-20230712-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2292-62-0x0000000000400000-0x0000000000425000-memory.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target 2292-62-0x0000000000400000-0x0000000000425000-memory.exe
- Size 148KB
- Sample230822-j2nresba26
- SHA256 1566d0f0b01b50074e9bd94361021769c5e2cb5bde7182ba27bac12d8ff78367
- MD5 7b45b9ff4b354f6c3d00814c7cf145c9
- SHA1 5c37100d1d0b1e1f95738ad9444d3b0087adf853
- SHA512 be572b88b240d769fc5c7bf43f02b3bad02232e86de6ffda2da1c3e87b2b60b4ba36513cb494d255f80e03cd5c4549a3c8f8a6aeff2fcefb59a99ee6275c6598
- SSDEEP 3072:ROzIy5XGViztldWl88Yed2DQuIAQvQ+d0aYuRX:Ro2ViztvWlvd2UuIAQvQ+yFuR
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2392 4220 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\2292-62-0x0000000000400000-0x0000000000425000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2292-62-0x0000000000400000-0x0000000000425000-memory.exe"1⤵PID:4220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4220 -s 2162⤵
- Program crash
PID:2392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4220 -ip 42201⤵PID:4080