Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03-03-2024 08:01
Behavioral task
behavioral1
Sample
1600-456-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1600-456-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1600-456-0x0000000000400000-0x000000000046C000-memory.exe
-
Size
432KB
-
MD5
bd0f4c34626eaee3374ca1aea83e0907
-
SHA1
85b229467a088f586176a823b7ed0c2c396a2f1d
-
SHA256
33f0c90e565cac766cc4c626aa7eaa200e3ef4367fdd1f53e335c8f1b3f62350
-
SHA512
9520dd3a311d4c79cccff8a4ee42d600c0ede5e3e7cee5a9f925818e7065a97ef24360688e8d100b7f3592b6712e7a72d9a23773fe17c7142ca64bedce92ce7f
-
SSDEEP
6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGizN/9o0wVEhKhB1a:cuQRHexo0n24zVK32RRVmGiznwVbh3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4568 2032 WerFault.exe 1600-456-0x0000000000400000-0x000000000046C000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1600-456-0x0000000000400000-0x000000000046C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1600-456-0x0000000000400000-0x000000000046C000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2032 -ip 20321⤵