Analysis
-
max time kernel
162s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 05:41
Static task
static1
Behavioral task
behavioral1
Sample
d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871.exe
Resource
win10v2004-20220812-en
General
-
Target
d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871.exe
-
Size
23KB
-
MD5
3b793a7d78d1f31f1bb99b4cb1cc1d75
-
SHA1
5c733d8fb5705938a886dabfff7de74d776528e8
-
SHA256
d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871
-
SHA512
6c42eb0e77ded99c983a08f8612b7003cd213ef9b5b3d25e76fc15517e688173162b96fa55d03029c21b711b06ce05547240e43c11fcd627c8921f1e4987d4ec
-
SSDEEP
384:J9ngTUQwwzUqbG62WrUW8JLkzOdoxlq78WyeU/8wQs6SBdtD:JNncziLA6IeU0ktD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4192 4380 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871.exe"C:\Users\Admin\AppData\Local\Temp\d4a1180c390015461a862963026a67e87d2b2c9ee3033042d868ae5c44057871.exe"1⤵PID:4380
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4380 -s 3242⤵
- Program crash
PID:4192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4380 -ip 43801⤵PID:1804