Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 16:09
Static task
static1
Behavioral task
behavioral1
Sample
14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df.exe
Resource
win10v2004-20220812-en
General
-
Target
14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df.exe
-
Size
72KB
-
MD5
84141453652cdfd2cb5083d1ea81be9f
-
SHA1
2d83a453bd00f3289add1d8952da43745e32d06e
-
SHA256
14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df
-
SHA512
16f43331723285a7cd2b579fb82d1944744306edf21e4cf0ef1887b40bb1672298131a7301bbbf8bbeac503c9086eaf997e7d5779159b62efd8ac72ef5cc8275
-
SSDEEP
768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iKL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLKL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3576 1440 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df.exe"C:\Users\Admin\AppData\Local\Temp\14f43bc545550a092e50e81cec007fcc10d56fc4a456214d1567c4026fd7c1df.exe"1⤵PID:1440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 4882⤵
- Program crash
PID:3576
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 1440 -ip 14401⤵PID:2840