Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 20:27
Static task
static1
Behavioral task
behavioral1
Sample
3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4.exe
Resource
win10v2004-20220812-en
General
-
Target
3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4.exe
-
Size
210KB
-
MD5
962f44da91c2ae5e7bb924399d52e0c0
-
SHA1
6d94903cdacf31e63c6fd8dca0522a0e039d69a6
-
SHA256
3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4
-
SHA512
31443091bc7768c7af98b3ac77453b5a028090c6b6b85a236a3d48927da10c849ef87bd8317db27d7b0e61f17280f93ea2641c256283a7d4ef5f4f49bcb2bd56
-
SSDEEP
6144:h2LrpVCsKR/B4seyhUE9/8KlvtIbPa+1VEuKtieTA:hUrzR8Gs9JSKxtCJHEukA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 796 2964 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4.exe"C:\Users\Admin\AppData\Local\Temp\3795aed8847da2ec1167c4c11bbc348b05c23e5ad23efcd9a3446d207428b3d4.exe"1⤵PID:2964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2964 -s 5122⤵
- Program crash
PID:796
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2964 -ip 29641⤵PID:3552