Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2023 07:32
Behavioral task
behavioral1
Sample
2316-10-0x0000000000400000-0x0000000000444000-memory.exe
Resource
win7-20231023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2316-10-0x0000000000400000-0x0000000000444000-memory.exe
Resource
win10v2004-20231127-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2316-10-0x0000000000400000-0x0000000000444000-memory.exe
-
Size
272KB
-
MD5
5c592bc5425b82e03806169afeaceac8
-
SHA1
360ec04cd4cef8694f4d332bcc1c0723bc40228a
-
SHA256
af039178352ab8ac432ef829940240a30cfcce248e6988e9c5749f96d36669ca
-
SHA512
fe4af6334da7a8ad146cb9f7c65e99b3c7b78b93f20edd3d1eb7dd831d3344639009814cb3ec2f97e8477b21c06853a7071e4d2127aaa4362ae115038d6da40f
-
SSDEEP
3072:9eMWGALKGaeqt8TVBAnMtxyfjCZOY+kHDd8Wbmu58RXufX:9NALKGaeqt8TVBECZNaWiLXm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 488 880 WerFault.exe 2316-10-0x0000000000400000-0x0000000000444000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2316-10-0x0000000000400000-0x0000000000444000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2316-10-0x0000000000400000-0x0000000000444000-memory.exe"1⤵PID:880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 880 -s 2242⤵
- Program crash
PID:488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 880 -ip 8801⤵PID:4264