Analysis
-
max time kernel
112s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 15:55
Static task
static1
Behavioral task
behavioral1
Sample
540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9.exe
Resource
win10v2004-20220901-en
General
-
Target
540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9.exe
-
Size
169KB
-
MD5
965809ddf068a7b526cc47a7b2ed40b0
-
SHA1
412d28ebfa6b185705fb09babe6f7a20fc6fa300
-
SHA256
540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9
-
SHA512
ef0bc8fc2a3197043b7cdeba68fd8c15d7364793a6513dca52b54b087125f0516b4227b1b03af7fedba7b7f85b8460488c5136355e1719194e9137c83a026695
-
SSDEEP
3072:221OyPWu2zkRiiGyCZtoz+n8vlHaKCvpHzmsq6A5zs:221Pr4iGdtUlHazTmsq6G
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2300 1344 WerFault.exe 76
Processes
-
C:\Users\Admin\AppData\Local\Temp\540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9.exe"C:\Users\Admin\AppData\Local\Temp\540f83aab260b850e95b2682016be568d1f2dcc95afc475a5b996dd0bebf7ce9.exe"1⤵PID:1344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1344 -s 2722⤵
- Program crash
PID:2300
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1344 -ip 13441⤵PID:5112