Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
18/09/2022, 23:49
Static task
static1
Behavioral task
behavioral1
Sample
6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd.exe
Resource
win10v2004-20220812-en
General
-
Target
6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd.exe
-
Size
380KB
-
MD5
7a33f76a1f49d8998488164faa6324ca
-
SHA1
aa1fd7a5b79ad75050635c244e2ee54d9cceac7d
-
SHA256
6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd
-
SHA512
f156cbe55fecfc2e013d1df5ea3a642f9d723c125607300628fd09285962c0f34375423cacb9996ea029e6034500526d93b39e093d85ff685c40d3e6d791cc80
-
SSDEEP
6144:KuL1LcKgRX7BHgSneRnxSkHCo1XkV+3j2wVMRs+F:XL1LcKgBNHhCxSkiNV+3CwVMRsE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4896 3916 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd.exe"C:\Users\Admin\AppData\Local\Temp\6e170e470ff72ed76c566088e303ebac466ac72f18b35e1f35c75a1499c5dcdd.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 5682⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3916 -ip 39161⤵PID:2584