Analysis
-
max time kernel
133s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 10:39
Static task
static1
Behavioral task
behavioral1
Sample
970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9.exe
Resource
win10v2004-20220812-en
General
-
Target
970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9.exe
-
Size
167KB
-
MD5
3d82e85c2c7fa7d61e56d11731261289
-
SHA1
1e3f636bb0192d8f386f0a5a9bf298eb1679a44a
-
SHA256
970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9
-
SHA512
da20a75551d0d46673449919ef8eea9e21764d5bb20f57df12f175369fbcc30e93131a6247594a6679868d72c76d119375165ff4ee0218b843e85893d4dee941
-
SSDEEP
3072:9hVoPmy/GNh9CptmE9VMAT5pZM8mFF0JFMqElJ4vj:doOy/wAFDTLu8mSGvwj
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2868 4808 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9.exe"C:\Users\Admin\AppData\Local\Temp\970d65a455d0057b0cc963e2ae5bc801b5debbea0cbda4c81c88c7bb83e4cca9.exe"1⤵PID:4808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4808 -s 4082⤵
- Program crash
PID:2868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4808 -ip 48081⤵PID:4508