Analysis
-
max time kernel
54s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 22:53
Static task
static1
Behavioral task
behavioral1
Sample
534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9.exe
Resource
win10v2004-20220812-en
General
-
Target
534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9.exe
-
Size
126KB
-
MD5
90fd919861cb40e6f62f05d1dd9413f0
-
SHA1
74eed320963bd68d85fdea2cff7f79fffa916342
-
SHA256
534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9
-
SHA512
2bb4b2c03c1f3952c6be32e38b029156c833d3f694c54bbf326e9fee5d224ad91ab4af22492a9c0c7109952797e5c642d7901ce6a32ff8834b2ae847485ae325
-
SSDEEP
3072:gW7gXkqwV5kJwbfAk3A71+GuuNBLYQAdED:gwgXC5awbfTAJ+Gu4YQA6
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4928 2908 WerFault.exe 81 4752 2908 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9.exe"C:\Users\Admin\AppData\Local\Temp\534a61368777a359303daa50b42a508d5c9795d69f766700436486dee54eddf9.exe"1⤵PID:2908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 5242⤵
- Program crash
PID:4928
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 5322⤵
- Program crash
PID:4752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2908 -ip 29081⤵PID:5028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2908 -ip 29081⤵PID:4104