Analysis
-
max time kernel
137s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
10-10-2022 23:58
Static task
static1
Behavioral task
behavioral1
Sample
194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b.exe
Resource
win10v2004-20220812-en
General
-
Target
194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b.exe
-
Size
861KB
-
MD5
74c725677fb402bb40d55ad1cf11d98f
-
SHA1
46ba5579878d75f1579a14436479689a25f41436
-
SHA256
194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b
-
SHA512
536ed2d0bc5d8b0ae36e9c70a246eeda4d07f0ab41ee2800a49aed774b62bb9c753b05dec4b8372d381d1bab80536b5db77845b3c67a148f7f64912ec74faa97
-
SSDEEP
24576:zSKf7H5+QgpmwxpVfVw8kORkRevqfyARLQJt7kgqSM:zSKjHQL0wpVtPwryARyFBM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4752 4568 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b.exe"C:\Users\Admin\AppData\Local\Temp\194bc28126ff2dc61f0780afe3974987e333a382e090c28b1d4974de5cb4bf1b.exe"1⤵PID:4568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 5722⤵
- Program crash
PID:4752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4568 -ip 45681⤵PID:1168