Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 06:56
Static task
static1
Behavioral task
behavioral1
Sample
4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a.exe
Resource
win10v2004-20220812-en
General
-
Target
4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a.exe
-
Size
190KB
-
MD5
5247736040fec86fb639de7ece783fa3
-
SHA1
b213e48020d2262c2ff345f800c17fae311ff0af
-
SHA256
4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a
-
SHA512
d3063014112ca67e7940dc5ec9fbd288e432f556d881db02ab8899a3b58059c64fc52e460023ea98b51b5206195550a9f2cf1b14067265b8683adc487186363f
-
SSDEEP
3072:m7B3DAuocS/Q8JSA0YITO7LQdhMceV4dl88AHWSJvfk3Gn7KM3oMsGX2XvWEKx:YBkXtAAxb7LwhMc5sNvf5oMsO2FI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4276 2084 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a.exe"C:\Users\Admin\AppData\Local\Temp\4a5bbdc3985f0f0a1b54e8d9a60e4a2a1185470ccb9a437a5103582f6396940a.exe"1⤵PID:2084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2084 -s 3482⤵
- Program crash
PID:4276
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2084 -ip 20841⤵PID:1032