Analysis
-
max time kernel
70s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 18:00
Static task
static1
Behavioral task
behavioral1
Sample
d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48.exe
Resource
win10v2004-20220812-en
General
-
Target
d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48.exe
-
Size
56KB
-
MD5
6aac63e44d5865a2765fa23f1e471278
-
SHA1
46c5bf4fdf584a0910d60ddd46634890bfcb4d2d
-
SHA256
d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48
-
SHA512
630926e924070f4c16d23d1f0e909c4f78c16f2ac05f06bd3edc906a7f59f050ed78678ac705e6f60d4909d783d58107fd9aa8f489256c6a3aeacaf963c37579
-
SSDEEP
768:/8lFhpU7uavVQ6QWjjqTBYdd0me7HLZz7kXsgWeV4tTWt:5jQWvqTBYEmcdz7kXsaV4RWt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4196 1044 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48.exe"C:\Users\Admin\AppData\Local\Temp\d5f5f5556d2c87d4a1503798603923785b7f226189f5cc8c31c2eb8ad2b91d48.exe"1⤵PID:1044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1044 -s 4402⤵
- Program crash
PID:4196
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1044 -ip 10441⤵PID:4592