Analysis
-
max time kernel
146s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 09:22
Static task
static1
Behavioral task
behavioral1
Sample
014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4.exe
Resource
win10v2004-20220812-en
General
-
Target
014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4.exe
-
Size
180KB
-
MD5
816994acce685c1d858973efcba36c60
-
SHA1
aa402a66e1230b86bb94f7bca05a9563d800063a
-
SHA256
014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4
-
SHA512
3b7b5ae0589e31749dc895ee6d91a2b313c8ccd7533d6281e425ad4c3213b2fd31d7d748ee050eaca9a2a0b4e5251f7da0a579847084881d97cd505c2cf7bc8a
-
SSDEEP
3072:mlRBykP9DAVZR/WKP52ptpben8d+oczUDD2H5aUlcyJc:CB5DeL+pptxnAd5aUKB
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2652 4668 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4.exe"C:\Users\Admin\AppData\Local\Temp\014c9b16346763f8916505db04e686c9fda1ec0a7f14c51b4d8137fad12977a4.exe"1⤵PID:4668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4668 -s 4002⤵
- Program crash
PID:2652
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 4668 -ip 46681⤵PID:2440