Analysis
-
max time kernel
101s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 23:33
Static task
static1
Behavioral task
behavioral1
Sample
105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f.exe
Resource
win10v2004-20220812-en
General
-
Target
105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f.exe
-
Size
162KB
-
MD5
923bd1587351025f015ced5a907e24cc
-
SHA1
357971005749f8141916ced08606aedeab51e427
-
SHA256
105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f
-
SHA512
b057f5074fa94732f5ead481f300f5b71e4123560c22cd100270239827a36b5bdc792031aa947217cfb3a6cc98504052de378e31661b6810b7ff2cfb4fc4896a
-
SSDEEP
3072:v8Zc0hTH53F/y0nzTd6UjIWVvn+owrx4imOQ4Xw1s2rQdJX3z8+mvA:L0XXzxHhv4er/4XLc0x3Bl
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4092 3372 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f.exe"C:\Users\Admin\AppData\Local\Temp\105140c58705bbd1aea7735f0f6145757fd6a22be2f366f8d68be9647bc0aa0f.exe"1⤵PID:3372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3372 -s 5082⤵
- Program crash
PID:4092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3372 -ip 33721⤵PID:1480