Analysis
-
max time kernel
162s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 06:24
Static task
static1
Behavioral task
behavioral1
Sample
d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49.exe
Resource
win10v2004-20220812-en
General
-
Target
d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49.exe
-
Size
404KB
-
MD5
63d61038f0e02251285996ce3168b512
-
SHA1
4e1f1ea8fd29a95108158c55bbd6506a6ffc6842
-
SHA256
d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49
-
SHA512
43988b758c2f98be73bdf748053ea5fc306dd607b393ce47b0adb41c2770d2986783d5d2147bb4e45a5204757ddff7d7dbac6502dae69aca26aa91c3625684bb
-
SSDEEP
6144:jw+hqgVrYb72q1XNflmtAQOMzIJDfVqVWoGR4Cw:XhBYf2qZNfl6rIJhqnVC
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4712 3452 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49.exe"C:\Users\Admin\AppData\Local\Temp\d70990a89b208dd4709647992e52008fbd7de3b340f79494458198da74841b49.exe"1⤵PID:3452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3452 -s 2242⤵
- Program crash
PID:4712
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3452 -ip 34521⤵PID:4808