Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
17/10/2022, 20:15
Static task
static1
Behavioral task
behavioral1
Sample
6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e.exe
Resource
win10v2004-20220812-en
General
-
Target
6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e.exe
-
Size
3.1MB
-
MD5
1a9ae891466ddd309bcc13cef6cb6e17
-
SHA1
c76aa630f9f016e0d238e106e914b99b537795f8
-
SHA256
6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e
-
SHA512
c94f5e960a319e2480ba072ba02ea635b1a41585bd521a9ddd5cbc4a8e99b0a4c6911837174c1c26662ecfc9657c0049b5f905ed483e3af595c9786dc2784f79
-
SSDEEP
24576:BpobRvCCHdsZXswB9qW2Iq8j8+0y9zCPYzLsN6IzV/VMmTkybnqy74:BpoN39sKwK+f9C+wpdMm4ybn174
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1120 1268 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e.exe"C:\Users\Admin\AppData\Local\Temp\6f3fe8426ecf1616eff3e3380a697f503bb3c39c4430c76f5855252c441dcf9e.exe"1⤵PID:1268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 8402⤵
- Program crash
PID:1120
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1268 -ip 12681⤵PID:2696