Analysis
-
max time kernel
112s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 09:57
Static task
static1
Behavioral task
behavioral1
Sample
04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2.exe
Resource
win7-20220901-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2.exe
-
Size
822KB
-
MD5
6f72af5f74cfd3ba9a0f345ddcb13bf0
-
SHA1
0dbc9757f231c54d8cb180ee2d013970ba5c3b99
-
SHA256
04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2
-
SHA512
1e1aa0e1b291398cb63d6194810714b9510f8ac43666d650af04a61366a5b1c27c0dc019404db3391a84156d7861475a9e44266753f56f0a29551e989118ba76
-
SSDEEP
24576:khrRhkSxOwHQAfjTeUCyA6mBEZEzG7pV9R:khrRhkVAfjTLA6MEq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3612 1780 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2.exe"C:\Users\Admin\AppData\Local\Temp\04c85e7fa589bb8750426b1026d7142554d737263a5e178e30f305bd13c5c8b2.exe"1⤵PID:1780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1780 -s 3882⤵
- Program crash
PID:3612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1780 -ip 17801⤵PID:3620