Analysis
-
max time kernel
6s -
max time network
7s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/09/2022, 21:09
Static task
static1
Behavioral task
behavioral1
Sample
Patcher.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Patcher.exe.xml
Resource
win10v2004-20220812-en
4 signatures
150 seconds
General
-
Target
Patcher.exe
-
Size
807KB
-
MD5
cf76942c2f25f4264d7272abb663a5c5
-
SHA1
74b65109c18515d37e2da59ad6e90104af068269
-
SHA256
83ec5e0e5c5c50da1fa2a9d30028a10c09c623f6d277a72579cdc550286c4084
-
SHA512
617309d82d5359f507734c7947aacf131b0009a18b4beacf1348be9cfb70fb24ac2250773d0d381ac86a1cb82693dda087be8da8114b1feef5ba5a7d7bf5694a
-
SSDEEP
24576:OhJ31cgSLkI1Ckio6IW4dvPJW2k9XyJBE1WD/k+K/:cJ31cgSLkI1CXo6IW4dvPJW2kFA+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1260 448 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\Patcher.exe"C:\Users\Admin\AppData\Local\Temp\Patcher.exe"1⤵PID:448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 9882⤵
- Program crash
PID:1260
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 448 -ip 4481⤵PID:872