Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
04/09/2023, 07:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
-
Target
e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7.exe
-
Size
4.2MB
-
MD5
bbde7fd74120ad09f3153b0865004e8c
-
SHA1
a1ccfa7f5915cf35b635a549e8f151b5dfa50d8e
-
SHA256
e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7
-
SHA512
29500b411cffe734886d83d82c91a52a17cb373244593926f61da0008b08f59d4442f2d1af69dc07f3dd96d99153a7c1c04449f2b63645777ef2537b29e3b7fb
-
SSDEEP
24576:4xP1Nmm3mdNjEOSjiR6x44cGHvFN4RTIZC9Bfa:4bOIx4FlDfa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3764 4496 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7.exe"C:\Users\Admin\AppData\Local\Temp\e8002a0e86fe924da8c1201b9d97a482275f2e9f4e669e581309b2eb9aad45e7.exe"1⤵PID:4496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4496 -s 2242⤵
- Program crash
PID:3764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4496 -ip 44961⤵PID:1592