Analysis
-
max time kernel
75s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 17:04
Static task
static1
Behavioral task
behavioral1
Sample
29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037.exe
Resource
win10v2004-20220812-en
General
-
Target
29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037.exe
-
Size
120KB
-
MD5
6d5f97a6e6d67be9816b177d5952ce47
-
SHA1
a8bb16dfc1b049504104ecf869b45b050e21b9c0
-
SHA256
29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037
-
SHA512
4419ad7e136c8009a0f4e4f87cf63b685c64f7de7a8021ad5c7eb5f1541067082339533af5d30c2fe99fc48bd8aff0bb1f00ef1f767722f689cb7cb3528dacd4
-
SSDEEP
768:2NcZN41UR+HLGyPs89BEIJC2PwiTdQoA6W6m2VqijuCp2R:T6qH89eIAviZjmkqiju
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4012 3984 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037.exe"C:\Users\Admin\AppData\Local\Temp\29fcad47d05ccba520b3dac713ca371f44b518254425115344e57199314e7037.exe"1⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 2842⤵
- Program crash
PID:4012
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3984 -ip 39841⤵PID:3580