Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 01:03
Static task
static1
Behavioral task
behavioral1
Sample
1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1.exe
Resource
win10v2004-20220812-en
General
-
Target
1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1.exe
-
Size
41KB
-
MD5
684dccd7c5bdf762e0bd58efe061cf29
-
SHA1
b9347324b10650da121e443cd6435898172a3be4
-
SHA256
1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1
-
SHA512
e50081c2a5f5b7e392b16eeead566aa7d3ea25e5612178a51e082ef1b930e5ab6da0d022f5782292f1790799e1ccfea822e389c6c4f3b521865e544c5f398646
-
SSDEEP
768:4CHquQIbmVwvxSGnbwA8h6PgK9wcszngHaXmRiL3Lqrqt3yCLb8x:/HquQIbjS0UAYBXcsVXm23jsCLIx
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4924 4056 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1.exe"C:\Users\Admin\AppData\Local\Temp\1e382cca616c28c93ce443096c365f4cb22200997fe4d5cfb6bee6c3d38ce8d1.exe"1⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4056 -s 4082⤵
- Program crash
PID:4924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4056 -ip 40561⤵PID:4948