Analysis
- max time kernel
147s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system - submitted
09/12/2023, 22:07
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231023-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
- Target file.exe
- Size 1.6MB
- Sample231209-11mamsccf7
- SHA256 b8aeaf6efb7b3729651f0f85c98c81718da7c855804e607e119fd42fb81d483d
- MD5 915eeae8f11f2a818d980c7cb9ba399c
- SHA1 fdaf53d2a2bb0f28f34502ee36a01d31dcbed41a
- SHA512 a604a0b83552b0ee746d7f4971d2731a6c578ae7996e5f92a9e7a4c2d430071f76a9d353959b8932fb0e0adaf290eb6a9a9507c76d449c90518e55d19c56b2d6
- SSDEEP 49152:qWg8wUmZOzqiavjDUJO/WH89ctcO0ljbbQnIQGotBKqy8TJCHEGU42sn6:ZiUmZOzqiavjDUM/WH89y8bboGO
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2852 4156 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:4156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4156 -s 5642⤵
- Program crash
PID:2852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4156 -ip 41561⤵PID:4888