Analysis
-
max time kernel
152s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 18:57
Static task
static1
Behavioral task
behavioral1
Sample
f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771.exe
Resource
win10v2004-20220812-en
General
-
Target
f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771.exe
-
Size
46KB
-
MD5
a001a03a95d4e625aaf678caf56cd3a0
-
SHA1
ca644278e27b5017693ae2309c5be43b2933122c
-
SHA256
f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771
-
SHA512
74e2d3385be18770f5e4dce39731597765001efc796f93f1cb25b97624a0c81725edd5e67e446517af0caadefa117c0990edaca016e4f20aeb5bed47fe2532ca
-
SSDEEP
768:tanJ7UE+A7gTplJMOYKBYCuvMuGSMGkmxMupps512HVxIbHmVz1jUgisKl4qR:tcL+AUTpldY9CuvMuGakmx1ps512HVSX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1680 5016 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771.exe"C:\Users\Admin\AppData\Local\Temp\f21cbf0ed491d6859de4e2b6b12aa15353cadde5683997a00279bf374430e771.exe"1⤵PID:5016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 2762⤵
- Program crash
PID:1680
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5016 -ip 50161⤵PID:4296