Analysis
-
max time kernel
70s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 07:38
Static task
static1
Behavioral task
behavioral1
Sample
56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602.exe
Resource
win10v2004-20220812-en
General
-
Target
56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602.exe
-
Size
1009KB
-
MD5
55091925d5c099b0e1829a6895ca0d00
-
SHA1
444814cd10990428b1a7787a941b8a9cd2178932
-
SHA256
56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602
-
SHA512
b880075cc5d23f4717167ff2f27a6d51b395742c82fbbaa9931b3e79f55be731ce20683c4eba4760cec3add203593dce8aa3f3d0025a24aa1e10a9cd6a6e7dfe
-
SSDEEP
24576:zw6236jZd+9M6Foda3NYuh8fQTeU0sUa3NYuHk3xy:zw6Rm9Rq6NLPDZTNLEBy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1864 4824 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602.exe"C:\Users\Admin\AppData\Local\Temp\56730f291a8144a0564c716163d0d0f649e25178bb60ce1775a17136393a2602.exe"1⤵PID:4824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4824 -s 5162⤵
- Program crash
PID:1864
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4824 -ip 48241⤵PID:860