Analysis
-
max time kernel
149s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 14:48
Static task
static1
Behavioral task
behavioral1
Sample
61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3.exe
Resource
win10v2004-20220812-en
General
-
Target
61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3.exe
-
Size
1021KB
-
MD5
046c8f9134ee03631245e705ae62eb56
-
SHA1
0977506c760fd8b951c3f9c1f068517d3a63cae8
-
SHA256
61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3
-
SHA512
3012de6085cbac2f3934c102a669a5274de972c3ac92ae5a4a2551ede1f9ef2a7f81dfb6a2590c3569c74d713ba93b9b133c0a2843b212a080db51e20913b643
-
SSDEEP
24576:wkIziEmdDS98H213wopXYLgcJYP/QCGzzmangMgdME0fG:wliE0SA213wz9JYJ9dME0fG
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5100 4768 WerFault.exe 78 4832 4768 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3.exe"C:\Users\Admin\AppData\Local\Temp\61fd90e5b1edfd1b9048d76f62d4bed22dc44d94aaac8f126ba468dd096da5f3.exe"1⤵PID:4768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 1402⤵
- Program crash
PID:5100
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 2802⤵
- Program crash
PID:4832
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4768 -ip 47681⤵PID:2036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 4768 -ip 47681⤵PID:4624