Analysis
-
max time kernel
106s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2022, 10:48
Static task
static1
Behavioral task
behavioral1
Sample
c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a.exe
Resource
win10v2004-20220901-en
General
-
Target
c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a.exe
-
Size
76KB
-
MD5
409dd2e2d180c8aae41a6b50c8e28c00
-
SHA1
27dc5d6a4d4c65b431ee56e93da24ac0c3a8e927
-
SHA256
c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a
-
SHA512
7f2aae64d8e16eceb1c73c6067f3e1c8ef89aae242da04d2d34cab808360457b0f286466a47b073226b4ef959a016cb72659e132a9bebc1718ffbcfef40f10ad
-
SSDEEP
768:sT/8cOLDVRgLAJ4sUXGXgYXrX8xkJuKm3MjALU4oWBL1sVCWOnXQIkN/c:9cGDgcJ4saxZ8ir+VCHQIkN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3676 2548 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a.exe"C:\Users\Admin\AppData\Local\Temp\c19824086538d7c4ef0cd6b30fc94c2f61bbc5566daf9bfc3af7bc1d2a92235a.exe"1⤵PID:2548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 2642⤵
- Program crash
PID:3676
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2548 -ip 25481⤵PID:1736