Analysis
-
max time kernel
91s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 08:42
Static task
static1
Behavioral task
behavioral1
Sample
d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd.exe
Resource
win10v2004-20220812-en
General
-
Target
d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd.exe
-
Size
167KB
-
MD5
ab68cdcbf5bbf4a4d2b71493305f0fa9
-
SHA1
eabfa6123dc745d142b23d51638e002bdb9f4b51
-
SHA256
d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd
-
SHA512
0b0d22b160a4be546a0d96d402296a11b8bda2baf05cd3f882372f31acee22c0d775e30be39632ec4aafe2485917cde54e3fedfcc2ff07188c6ce68dc27a7ad8
-
SSDEEP
3072:+qwnALiATU+lsg2dx062lqzQwVBQ4/54z1xsOed+4auIlSct:6HNqsg2D0Hlcx/5wx0QXuI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1944 1556 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd.exe"C:\Users\Admin\AppData\Local\Temp\d3b00b4d4f490e4c78adc45b94c07d1fa52026a2d2e717145f35459b82eeeebd.exe"1⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 4882⤵
- Program crash
PID:1944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1556 -ip 15561⤵PID:1792