Analysis
- max time kernel
118s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
04/10/2022, 01:20
Static task
static1
Behavioral task
behavioral1
Sample
c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d.exe
Resource
win7-20220812-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d.exe
- Size 496KB
- Sample221004-bp71jafda3
- SHA256 c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d
- MD5 542f9348faf21c536fa0a060a1e4b350
- SHA1 0ac6f395ce0d0701b92cef066b8164c0a8c9290f
- SHA512 11e843da928b1adfc80c28886be688fd48a40563567ce6aff5e932ea6a26981af5e915567f77831003150b220f0e1b81dcf01cd0cc408f07f2f3024594d9641b
- SSDEEP 12288:LqPMJ0RNG3GZXnRe7T0Zr55h9sb3Qt/hs:1JKOG1nR6wVLuQti
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2784 2972 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d.exe"C:\Users\Admin\AppData\Local\Temp\c739b9d1c5160808a9132a772ac94defad65972b3e95bf3666bec0c341b72f0d.exe"1⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 5242⤵
- Program crash
PID:2784
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2972 -ip 29721⤵PID:5068