Analysis
-
max time kernel
153s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 14:46
Static task
static1
Behavioral task
behavioral1
Sample
d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2.exe
Resource
win10v2004-20220812-en
General
-
Target
d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2.exe
-
Size
1.0MB
-
MD5
f80983f4b12b47c78688fdfdaf7681a9
-
SHA1
d52d70cc44272894c4411adc522dcaecba788d2e
-
SHA256
d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2
-
SHA512
b31e1c924e1bae5a8e73dd53c423d4b31105f1598be92a041f2c8ccbbec87e60b44c81ae8824a276601362aa57c303dcfc3c70f3d257889cace65f517af17bfb
-
SSDEEP
12288:69VSr2cCYUWT2Lbdk4abWe3mEMtlKMMhGO0LlkZleGfAxZn0OpHrVEhmMn9nP:R15AbdvavslKMcGO0CQZ0OpLVul
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2084 3588 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2.exe"C:\Users\Admin\AppData\Local\Temp\d4654a69f89c5c74183778f560c54de2d9b450d56ff67b59c8dbe93ba58eccf2.exe"1⤵PID:3588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3588 -s 2762⤵
- Program crash
PID:2084
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3588 -ip 35881⤵PID:2944