Analysis
-
max time kernel
105s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01-10-2022 21:18
Static task
static1
Behavioral task
behavioral1
Sample
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
Resource
win10v2004-20220901-en
General
-
Target
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
-
Size
120KB
-
MD5
6af8e5891dd8a9b40ec939324cdb8bf9
-
SHA1
56e469256c39f91a1ac5ba093329d949a4e706da
-
SHA256
7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2
-
SHA512
22f36042173ec1e1cfaf70f0e010de6a8d88c9e575d7939af69ffd183041c2ea9b5b7810dbbceced0f8710c555f8917bdc8efb1d62c84f65513b6c949a99cfa4
-
SSDEEP
1536:z4GX3PiPLtnqmu6ycsuGj2BqRKVR3l/2NGck5NbjwdM5euiv5pzdFczKcI:zfX3PiPxqmOcsuGjZRk4/kTbUQFiI+h
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2576 5012 WerFault.exe 7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe"C:\Users\Admin\AppData\Local\Temp\7c56c605b8fe9d6831d4d219a61f23778e18490620235863e014f19a3dc90bb2.exe"1⤵PID:5012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 2402⤵
- Program crash
PID:2576
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 50121⤵PID:1448