Analysis
-
max time kernel
139s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
21/01/2024, 20:53
Behavioral task
behavioral1
Sample
2928-6-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2928-6-0x0000000000400000-0x0000000000433000-memory.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2928-6-0x0000000000400000-0x0000000000433000-memory.exe
-
Size
204KB
-
MD5
09a08b5c60c04d5771255f4e23689e1f
-
SHA1
a435a1a80055cdf5c0023e224e2d86191e7eb4e9
-
SHA256
74cf2ba6e8f443c83aeb02b75551e041a0c8557621c06af1fb4ba6df53081cae
-
SHA512
5ec0aa8054ceea2dbacc8d65491785b26076ad0fd81582398677dc0a8f37188a2d5ac09fea68563f25390bf92b0584061481bf13a9f410d91dfb05c899c9d224
-
SSDEEP
3072:jOzPcXa+ND32eioGHlz8rnAE0HCXh0edLv1bYMjMqqDvFf:jOTcK+NrRioGHlz8rz0i/ZzQqqDvFf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2580 1732 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2928-6-0x0000000000400000-0x0000000000433000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2928-6-0x0000000000400000-0x0000000000433000-memory.exe"1⤵PID:1732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 2162⤵
- Program crash
PID:2580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1732 -ip 17321⤵PID:2640