Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2.exe
Resource
win10v2004-20220812-en
General
-
Target
1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2.exe
-
Size
212KB
-
MD5
629a19ade2b8acd30ee7a2961b2931d1
-
SHA1
c207f780d550dd71e127b9176c89adb1c79ea8ee
-
SHA256
1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2
-
SHA512
f817bbd61e978176fea6a1cafe038722dcaef318fdb4bf84bc61d548192dce0928caefed460dc65004f06350177ab60a67e296b7c6c828c087d32de64a4d4342
-
SSDEEP
6144:gPUZ1jxhINfRN02uxJekQ4ARtXFWuVD1GbNA/:gPSTuDwx0kQjtXFWuR1GbO/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2160 4744 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2.exe"C:\Users\Admin\AppData\Local\Temp\1c68679df8fac2b78c608cea73efe329a40ec56406f37c8f70f6fd44c84179c2.exe"1⤵PID:4744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 5922⤵
- Program crash
PID:2160
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4744 -ip 47441⤵PID:3620