Analysis
- max time kernel
127s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
05/09/2023, 03:36
Behavioral task
behavioral1
Sample
2896-756-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2896-756-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
- Target 2896-756-0x0000000000400000-0x0000000000430000-memory.exe
- Size 192KB
- Sample230905-d57e2sch5s
- SHA256 96bdb05b44753e75c7d4d8ea930829d48287d3e2653405158cf3e839149e58f5
- MD5 ec7fd0f4aa22170a4ef2fa3a3fc85f40
- SHA1 8acbc12f7fb460c2d343f0dd5b365575cc248b50
- SHA512 a68dee64598c9a88470a08fef7a9f90c0a4d2cb72d56e93d98677acbc70dd55883b0baccd2127857d09636c9256733561191af3556bd39ddaf732f933251bb77
- SSDEEP 3072:f6TCDsOI0Gd3C2OTpoBCDxvE0KI+SZ3JU8e8hC:f6POI0Gd3CvDxvE0xZ3i
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1452 4304 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2896-756-0x0000000000400000-0x0000000000430000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2896-756-0x0000000000400000-0x0000000000430000-memory.exe"1⤵PID:4304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 2242⤵
- Program crash
PID:1452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4304 -ip 43041⤵PID:396