Analysis
-
max time kernel
93s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
22-02-2024 12:34
Behavioral task
behavioral1
Sample
1428-1-0x0000000000310000-0x0000000000328000-memory.exe
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1428-1-0x0000000000310000-0x0000000000328000-memory.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1428-1-0x0000000000310000-0x0000000000328000-memory.exe
-
Size
96KB
-
MD5
358665791ab6029cae9af9febba95685
-
SHA1
db9acafee39e12aa51b4147dfc2a750c29c17eb6
-
SHA256
9c6679cf48240afa4e75051042c10479f0e0dabb2ca00403ce3e0e5da36bec02
-
SHA512
548d93332c2f07323eb6ebd05c75817c3b24f8167c06fe6d332079b405af8cbf700c6eb530a655c618a2244bfd2486548e1ef18cf5137e90e8701e87dbe5b7db
-
SSDEEP
1536:xnNnlUZo2RwxFqd5AxgWP415DTtSix8d1CcoyLNJyX7DwN:NJlUCk8Fy5tvvtTxOdRCDe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2180 3608 WerFault.exe 57
Processes
-
C:\Users\Admin\AppData\Local\Temp\1428-1-0x0000000000310000-0x0000000000328000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1428-1-0x0000000000310000-0x0000000000328000-memory.exe"1⤵PID:3608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3608 -s 1922⤵
- Program crash
PID:2180
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3608 -ip 36081⤵PID:3832