Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 08:41
Static task
static1
Behavioral task
behavioral1
Sample
6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078.exe
Resource
win10v2004-20220901-en
General
-
Target
6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078.exe
-
Size
108KB
-
MD5
81874c0d6eb5527932deb85c4f76e940
-
SHA1
a6b4955d2651d0c4bc0c6d323a8c48221fb22378
-
SHA256
6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078
-
SHA512
7eeaf6e17a774aa91ae0a5c766a34fb5d7a346aadbcdbe175a95f0ae0f62994d76c5f3db3d0211a07f7d40d44480868807ad045e7798c33ba45af8512663ba2f
-
SSDEEP
1536:CJJEBBEymrQVMO6e5J/TF+pM5mPIzM8ZWHuuA39pIQyNisZUyWk2uEBEaQCm:KYBEyGOZJ/T5s439phvKAy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4468 4924 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078.exe"C:\Users\Admin\AppData\Local\Temp\6bd29f52da814d27633ea235a66ca4464c2cb81bd74a73cec3915b381f71b078.exe"1⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 3362⤵
- Program crash
PID:4468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4924 -ip 49241⤵PID:1124