Analysis
-
max time kernel
121s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 12:19
Static task
static1
Behavioral task
behavioral1
Sample
b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b.exe
Resource
win10v2004-20220812-en
General
-
Target
b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b.exe
-
Size
128KB
-
MD5
642f39b3b1c7e865dcd71e51c09d7e33
-
SHA1
13f746bf7a0bcaf3943a90d250fd6ada07783428
-
SHA256
b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b
-
SHA512
bcf737ccd7e230c237c1db3fe88bcb29c0db75b28ffb3fcd43fc644574e9e6469116b4b71f6dfa3604452358b0823a5fce345fc7ee3ae2d6207256a9eeb1495e
-
SSDEEP
3072:3ewvFTjuyu6dj2J67lgOSz+9xNYuQbB/F0zW7qnYEwg91l80L80FY3FguRXG:Dvxa8dS6eOSz+HNYX90zWcH91jLKFgu8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4644 2544 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b.exe"C:\Users\Admin\AppData\Local\Temp\b15b366b8d23c85fe788b438eaff6a2950aefd06ca250d976e5b646d7c6cce5b.exe"1⤵PID:2544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 4882⤵
- Program crash
PID:4644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2544 -ip 25441⤵PID:3584