Analysis
-
max time kernel
172s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 18:32
Static task
static1
Behavioral task
behavioral1
Sample
36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf.exe
Resource
win10v2004-20220812-en
General
-
Target
36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf.exe
-
Size
43KB
-
MD5
066de2143fe5573d94037f8f91a00ea8
-
SHA1
670efbfe45f68e69b56111e27a8ab48d1726896b
-
SHA256
36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf
-
SHA512
0c7684dbaa0860d9ab5db7dc168e0b7d7c2dd4b94efc9eadc6c1819e2d2afde97c5010405b754fe604f4047252e2cdcd1a2d576771d09c614476f1c0e7f909b1
-
SSDEEP
768:4M18jvBoKJeWqfOlPMTI8FtPPkB6avk8HQVXPFR+E/G2:4VLCK4WekMTI88B6F8wVf3+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2632 4760 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf.exe"C:\Users\Admin\AppData\Local\Temp\36c52674e861697b4f9f3e3e67846e6a592f9d4c96b92c165b69d9c06756b2bf.exe"1⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 1962⤵
- Program crash
PID:2632
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4760 -ip 47601⤵PID:4768