Analysis
-
max time kernel
175s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 12:05
Static task
static1
Behavioral task
behavioral1
Sample
db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b.exe
Resource
win10v2004-20220812-en
General
-
Target
db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b.exe
-
Size
192KB
-
MD5
6b3520071c2bce8966480db5eb206250
-
SHA1
63f8d183b3a863688746b94ec2ef442e47bf8270
-
SHA256
db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b
-
SHA512
ce8054d177fed61c5465ef23c0431a2aa5695b0b8b1c33d9584ead358302b2221461096d0b65ef27da4a4f686dd8388ece52d166eec1c3fd7a410ebc79393e62
-
SSDEEP
3072:kXhEZlPc/EQv36BO7YfITv2xQi9Zl7IXMII4t4rKgBzDShnzRqC6UwFr+og:guPQ6O7YfQri9TIXoFBzehVmHFM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3416 2196 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b.exe"C:\Users\Admin\AppData\Local\Temp\db5f71d6ddbb8ae6620e92841f584c13dfd6b36185f23255d29860a81b19157b.exe"1⤵PID:2196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2196 -s 2842⤵
- Program crash
PID:3416
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2196 -ip 21961⤵PID:1968