Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/07/2026, 04:28
Behavioral task
behavioral1
Sample
8e5b09c1858a14a88c22667a90b8acd64e7e402bca7b222babc3371b316d21ac.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target 8e5b09c1858a14a88c22667a90b8acd64e7e402bca7b222babc3371b316d21ac.exe
- Size 3.0MB
- Sample260714-e33jragv6t
- SHA256 8e5b09c1858a14a88c22667a90b8acd64e7e402bca7b222babc3371b316d21ac
- MD5 46353c47535496e3975a3c2d0d60fc9c
- SHA1 84c5c486c427abdcdc1b03828b463bd11cb6a0c9
- SHA512 65a5d49ea83e67795343f73a7ebad4fa987946b36004dc99e7d856ea96c2029c93990360ee7cd188fbfc5444188482dff06698ebd444299742018d1bd84784c2
- SSDEEP 49152:iA/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:9/whnLrHp/qKm2/Sb/
- TLSH T1FBE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/776-0-0x00000000001E0000-0x00000000004E5000-memory.dmp upx behavioral1/memory/776-1-0x00000000001E0000-0x00000000004E5000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 1044 776 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e5b09c1858a14a88c22667a90b8acd64e7e402bca7b222babc3371b316d21ac.exe"C:\Users\Admin\AppData\Local\Temp\8e5b09c1858a14a88c22667a90b8acd64e7e402bca7b222babc3371b316d21ac.exe"1⤵PID:776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 776 -s 1362⤵
- Program crash
PID:1044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 776 -ip 7761⤵PID:1620