Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 16:25
Static task
static1
Behavioral task
behavioral1
Sample
fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47.exe
Resource
win10v2004-20220901-en
General
-
Target
fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47.exe
-
Size
175KB
-
MD5
96c54828fe22fd6ff230687f2ef4ebf0
-
SHA1
1979051cfef3bef8507eedfc5b644d033ce97d9f
-
SHA256
fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47
-
SHA512
e892c91773c2dc5cc7b0c7db8cc77db43c76b4f7773177d6bbf3a69d1893608a5df0cea1774b60b6894db136d73588e42f67a5b4a8730e1bc14f006717561698
-
SSDEEP
3072:0cpJ1Rb49OIMBWOfgyFxbTXpbwjanmd/P5H7Kh:h7b49KBWBux/tn435H2h
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1908 4904 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47.exe"C:\Users\Admin\AppData\Local\Temp\fcccbaf4dfd2de9147c1a41654ee34450d5261483389cb5655248ec6d8f73a47.exe"1⤵PID:4904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4904 -s 3402⤵
- Program crash
PID:1908
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4904 -ip 49041⤵PID:3188