Analysis
- max time kernel
148s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system - submitted
10/12/2023, 03:37
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231130-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
- Target file.exe
- Size 1.6MB
- Sample231210-d6f99abhck
- SHA256 fff45c9cfa31bb0ec90eaf6e61e46a40409864f043e540bb3c4cc5b24697a736
- MD5 74f5f9772791af3f13d1e114b0e77d83
- SHA1 bd269e8018b57744efdfd83f7875abdced176119
- SHA512 ee0cb898ec39ea9090f9cfe170a409d3a7b3b7ecfe39e0aff0660d9a48569dcd43828e830999f636d6a9907433c280c4204ff4e8bd610764b6a60335755cd680
- SSDEEP 49152:qWg8wUmZOzqiavjDUJO/WH89ctcO0ljbbQnIQGotBKqy8TJCHEGU42sn6:ZiUmZOzqiavjDUM/WH89y8bboGO
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1084 1020 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:1020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1020 -s 5642⤵
- Program crash
PID:1084
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1020 -ip 10201⤵PID:1752