Analysis
-
max time kernel
98s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 17:04
Static task
static1
Behavioral task
behavioral1
Sample
d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165.exe
Resource
win10v2004-20220901-en
General
-
Target
d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165.exe
-
Size
156KB
-
MD5
329b86085bd0058ad41bfa621ec84ab8
-
SHA1
f32a2286a4a4914ed5c5f6aa6ddc0a7205f8fab4
-
SHA256
d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165
-
SHA512
7085c83dd2ec522095322f432b3530790bc6ea5eaa3e0afb56aed83dad6ed5c63d7719f35653586e26fb1fb85447bbea8181a52cdf002de5b9d751cb78f6d8f6
-
SSDEEP
3072:7V3Lvhd2FbXWoO6rUSEPNWrnWA8/3CIOezrHZkTTDTE8gO:B7vhd2s1TSE1Wrnx8/keznO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1760 5008 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165.exe"C:\Users\Admin\AppData\Local\Temp\d744e3c3e43a525f220220783d4519069c31ade0dcd688b2e3e1b80ae389c165.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 4522⤵
- Program crash
PID:1760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5008 -ip 50081⤵PID:4960