Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2023 12:49
Behavioral task
behavioral1
Sample
2144-0-0x0000000000400000-0x0000000000649000-memory.exe
Resource
win7-20231023-en
windows7-x64
0 signatures
150 seconds
General
-
Target
2144-0-0x0000000000400000-0x0000000000649000-memory.exe
-
Size
2.3MB
-
MD5
3b2dd7c96f8ac7b10db839b936d07e56
-
SHA1
c8a2ffae84d6600df2e50cac5172f47fb6c843f0
-
SHA256
e7825c466fa036eedac1885cea549b2a195ce6c9c9c759d6bf4ecb4f768b795e
-
SHA512
a341b28197d85faffc766f9cb74561d0be0c7a93a7301a73ea11168e3da96ee697da3231b6b2ceec51a9c76fbe101a441fbf921acd2026e196472b3bf0743bda
-
SSDEEP
3072:ffysv34+VEjY9c5WuSIfSJKTuz1F/nMR8yPUxcrmnUlnrnTfmJ/qssn8qqVnC:ffyKE89+WyPTuz70R8yTnrj0Qh
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2144-0-0x0000000000400000-0x0000000000649000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2144-0-0x0000000000400000-0x0000000000649000-memory.exe"1⤵PID:4748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4748 -s 1922⤵
- Program crash
PID:1088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4748 -ip 47481⤵PID:1580