Analysis
-
max time kernel
111s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 02:17
Static task
static1
Behavioral task
behavioral1
Sample
a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4.exe
Resource
win10v2004-20220812-en
General
-
Target
a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4.exe
-
Size
106KB
-
MD5
800e41e56b8e5845f5498e48be7c1436
-
SHA1
9371508e152e71a638fed5ea268aed764040d448
-
SHA256
a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4
-
SHA512
4475da9e385121b6ccc6ac349804f0c3e6259e0aa4344e50a8af955fede3603e0816115881eaba864a67492496eb5f4471746fbdb44f140b6b535765b88f7d49
-
SSDEEP
1536:W+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:W+FDzK71QkbstyJjCKICpC72s/mlaX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3376 2040 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4.exe"C:\Users\Admin\AppData\Local\Temp\a3e5115fcd23440a775db0d6cb5fa2ac728afc2fa2a5c30066f4856cea550bc4.exe"1⤵PID:2040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 3842⤵
- Program crash
PID:3376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2040 -ip 20401⤵PID:2732