Analysis
-
max time kernel
113s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 04:06
Static task
static1
Behavioral task
behavioral1
Sample
1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1.exe
Resource
win10v2004-20220812-en
General
-
Target
1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1.exe
-
Size
264KB
-
MD5
8012ec75364d3b463df5dd2856ee9fb0
-
SHA1
d8923bd8d97c56b89800567a64d80b28efac559d
-
SHA256
1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1
-
SHA512
44e8e8e4b1527edbe4a3439269edf47c81a65cc204949240ea442dca44645124d7c06e954c92c68729727e96a5397c24c083ff81201c4ddb4164226770bcb1e4
-
SSDEEP
192:hyzY+4YK/XaFBW4HFzY+4YK/XaFBW4HvAL0gHrF:skUK/qnWIkUK/qnWtL08r
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4772 5080 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1.exe"C:\Users\Admin\AppData\Local\Temp\1b2032ada15c548716f63f0b91bb7657d4b052a6c05ac47b91127e0cc2156aa1.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 2362⤵
- Program crash
PID:4772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5080 -ip 50801⤵PID:2504