Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 01:54
Static task
static1
Behavioral task
behavioral1
Sample
c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4.exe
Resource
win10v2004-20220812-en
General
-
Target
c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4.exe
-
Size
282KB
-
MD5
6381803e2bf3c60d8867861b050a35b6
-
SHA1
06ee3a7d21f4437a914300c3019cda5057e1de37
-
SHA256
c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4
-
SHA512
ee458bac31cc7296fcf23c7db1f52c1a394e4a66d93f5030ff33eab23a39c7300feb535174bcc9d33928f54418740b82a50adc84e8b606e89c255e506580ebbc
-
SSDEEP
6144:T4lAjvIFuUgGi99YGe7e3EqIdiK+flXHfm9jie/UnOb/QmGh/:1gwnGPGe7Bipt/62IUn2Kh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 988 1296 WerFault.exe 61
Processes
-
C:\Users\Admin\AppData\Local\Temp\c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4.exe"C:\Users\Admin\AppData\Local\Temp\c124034cc6bd03fa495bd0972b50b6a5d7d32b914fc3b98aae8595858dc385e4.exe"1⤵PID:1296
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1296 -s 2962⤵
- Program crash
PID:988
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1296 -ip 12961⤵PID:632