Analysis
-
max time kernel
134s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 18:54
Static task
static1
Behavioral task
behavioral1
Sample
17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e.exe
Resource
win10v2004-20220812-en
General
-
Target
17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e.exe
-
Size
329KB
-
MD5
36326eda7d0985f8cc6853ebe6ae386d
-
SHA1
60ba8fc4cb5bb230e50b9ed28e72e7eb3b370606
-
SHA256
17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e
-
SHA512
622b28297dfa4ad9ad8fd26b32d8c6039f0366ce82cf9d0061f7a51ce74ec07922d59779a48ae42001aceeff7a78dc50847c4199903577005c641abb433bca08
-
SSDEEP
6144:ztET7FUgPiyUXe2ZsD9eBVtQRlc12iVkIFzz9TLSDoC3FHvKHMVnR:za/Fhiym920jcc1f9H9XS335vHb
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4920 488 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e.exe"C:\Users\Admin\AppData\Local\Temp\17a9b86d6634b01b4b86e0f39acb0fe3f46631da272a7e055a731c106677432e.exe"1⤵PID:488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 488 -s 2802⤵
- Program crash
PID:4920
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 488 -ip 4881⤵PID:4980