Analysis
-
max time kernel
127s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 14:45
Static task
static1
Behavioral task
behavioral1
Sample
46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158.exe
Resource
win10v2004-20220812-en
General
-
Target
46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158.exe
-
Size
172KB
-
MD5
3e4c4032033b7d8c505dd6b1ad883fe4
-
SHA1
a43c589cd70f1ad9f4bf482522b1e27d47a330fe
-
SHA256
46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158
-
SHA512
5ccf9e9e1bf7c165faa57862ea1cf10aa1aae56073fb555aa900bec78d89a21b590cfb9b2a5b9128d04ccf0c24866bcd4894c8bece258776e44ddaa0b0b4e608
-
SSDEEP
3072:rPmAIdMDQA5eC8bcMXNwTr2jP4rPF+7JfA/QmosuiNyHwWJrT4haxnvEy2rN:6AId8QALW6Tr3YFAIm8iNMYoxvEFR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 960 4540 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158.exe"C:\Users\Admin\AppData\Local\Temp\46ea2a06c7a525e0d96fa6c1e9b9d9255addd0589b582a65225680e7bebaf158.exe"1⤵PID:4540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4540 -s 3762⤵
- Program crash
PID:960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4540 -ip 45401⤵PID:444