Analysis
-
max time kernel
143s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 05:12
Static task
static1
Behavioral task
behavioral1
Sample
c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e.exe
Resource
win10v2004-20220812-en
General
-
Target
c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e.exe
-
Size
816KB
-
MD5
31d43460214f299cd43b5a08a905bfc1
-
SHA1
bccf34470b4647715acc61b4755e7aa97ae99a9a
-
SHA256
c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e
-
SHA512
dae6153a04a662bc4eb8ed0c748da0ee7721438e12cb09192f84eebc69949f5f32e169091b4183c9e956236a1f30778291734960f51beaba0b94339d63ab40b5
-
SSDEEP
12288:QZpm5x9CRhMrhpfpEaKW34DfwTW85zlCpqsTRVsoH/MW/Wm7MDgTuaZxZMma:kpm5n0hMNZpBHEj8TUvJJt7kgqSM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3560 4636 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e.exe"C:\Users\Admin\AppData\Local\Temp\c43c0f8fa8fcf09ebfe720166c6336bec7db2cf7ca2e7d206da4832fdced8e9e.exe"1⤵PID:4636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 4762⤵
- Program crash
PID:3560
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4636 -ip 46361⤵PID:2732