Analysis
-
max time kernel
91s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2022, 02:53
Static task
static1
Behavioral task
behavioral1
Sample
4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a.exe
Resource
win10v2004-20220901-en
General
-
Target
4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a.exe
-
Size
190KB
-
MD5
78b7050015d9449daf55711e49420666
-
SHA1
acc61b25e0dd76c09904686decec13537513a25c
-
SHA256
4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a
-
SHA512
395c679901b65cd110bd6fbeac4e58cf8eae3ec276df1fc2c03742a87b1e4f8b01d46e3b0fccab0a87f1ba1cb26150e2086f157c2279fe72b31debd705305f87
-
SSDEEP
3072:0P4FJYI3wIPthmNdPS/a87SAWYIT47MFdhMceV9dl8SNHWSJvfk3Gn7KmtoVYGXy:ZJYIPDmy2APt7M/hMcMsYvfpoVYOs3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 892 3540 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a.exe"C:\Users\Admin\AppData\Local\Temp\4c61b0ddd457a859627294d205ac621592c3341c267f126d889995c54bf1188a.exe"1⤵PID:3540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3540 -s 3482⤵
- Program crash
PID:892
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3540 -ip 35401⤵PID:4996