Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21-10-2022 04:09
Static task
static1
Behavioral task
behavioral1
Sample
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe
Resource
win10v2004-20220812-en
General
-
Target
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe
-
Size
208KB
-
MD5
730a5f0125f82f16440d879be055c2f0
-
SHA1
82a675f4b607bea5385ab153c0b24504b586cdeb
-
SHA256
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf
-
SHA512
76b7bb2489c802e1b0a6ecdf2b9ac32834ffcae58a07bb050607b6680d8c7f81464023ac7d5430e13e3dbb2dd5d2640e22575c9f3e76cacd4702bc938fca9574
-
SSDEEP
6144:74o4MfKW8KwqlsEnLv5Zbevoc1yq2Y9TFl/z+x:0JMfKKw5ELvv24MF+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1428 2232 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe"C:\Users\Admin\AppData\Local\Temp\6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe"1⤵PID:2232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 4522⤵
- Program crash
PID:1428
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2232 -ip 22321⤵PID:3552