Analysis
-
max time kernel
143s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
10-10-2023 22:43
Behavioral task
behavioral1
Sample
2792-2-0x0000000000400000-0x000000000044A000-memory.exe
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2792-2-0x0000000000400000-0x000000000044A000-memory.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2792-2-0x0000000000400000-0x000000000044A000-memory.exe
-
Size
296KB
-
MD5
035318cc8710b893e2e017dd180c1393
-
SHA1
5a55a225fe6cdc98b17964484c6160c5e3f2f10a
-
SHA256
d1902b23490bc819c1ac0653b140eb4961f4ad15674676d7ae52c583d08c186c
-
SHA512
c9b4a295acdc771a28fadd76c0807c26c0cda376d54e753f0e98bbc0be526802fbfca9e8e959ed3f2f84801737292e149c809a11482425cd30d996b4d116cfbb
-
SSDEEP
3072:erPI5jSu1325RgfA4D3xM4d76cPMjbz9nEDL2kYAs5cvWChTrDP:uu1m5RGJrxMo76cPM2DL2t+vWSTH
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1636 616 WerFault.exe 2792-2-0x0000000000400000-0x000000000044A000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2792-2-0x0000000000400000-0x000000000044A000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2792-2-0x0000000000400000-0x000000000044A000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 616 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 616 -ip 6161⤵