Analysis
-
max time kernel
192s -
max time network
235s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 19:24
Static task
static1
Behavioral task
behavioral1
Sample
dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735.exe
Resource
win10v2004-20220812-en
General
-
Target
dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735.exe
-
Size
505KB
-
MD5
901fd8a7416fd67667a3863072647250
-
SHA1
9e47b37b96d3b540e45f1360794bc5334798815c
-
SHA256
dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735
-
SHA512
0952772b4941f3e6251bf91672add77628d9ffd13f2954efb78ff273811ed962c3f912aab40b55d2be848b4b4655e1d3a1cdbeefdcc0c5195ac098714c99828a
-
SSDEEP
6144:H4h88HmXLnFUrudpWWYk3OmsvRebR/YCMwG0d1oRhPaz/twt3y0FS:Yh88HmpMudpXYWOnw/YdV0jojvU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 224 2616 WerFault.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735.exe"C:\Users\Admin\AppData\Local\Temp\dea3e5fa45e2b709e240b450e00eadd80dcd624f88b8dd45cb3220978e487735.exe"1⤵PID:2616
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2616 -s 3402⤵
- Program crash
PID:224
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2616 -ip 26161⤵PID:2356