Analysis
-
max time kernel
162s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 00:33
Static task
static1
Behavioral task
behavioral1
Sample
e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91.exe
Resource
win10v2004-20220812-en
General
-
Target
e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91.exe
-
Size
235KB
-
MD5
038f81cf4a408a747de1df8c45e8f7aa
-
SHA1
8a456b6a9c7b2735cc09f9ea661dda1243f7d907
-
SHA256
e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91
-
SHA512
2f27fa372941813dbb2cbf88b37ee5321eb1e38404a185ccc0849ce25c33c33d3e2e2eceb3f1b0f58c3582b03fd7ac00cd535e5d48dcc44a83307edd6242c73a
-
SSDEEP
3072:6V1ZBJ0GCpw5sANR4Cpw5RCpw5sANRVANRVANRO:6VlJ4w5sy1w5Kw5sy/y/yg
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 852 4060 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91.exe"C:\Users\Admin\AppData\Local\Temp\e3d6dabe0f2ab56c69ef69382b35f61d32d0d2ac2262c7ef9cc184f552764f91.exe"1⤵PID:4060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 2962⤵
- Program crash
PID:852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4060 -ip 40601⤵PID:4200