Analysis
-
max time kernel
136s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2022, 05:15
Static task
static1
Behavioral task
behavioral1
Sample
e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59.exe
Resource
win10v2004-20220812-en
General
-
Target
e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59.exe
-
Size
75KB
-
MD5
76420aff74dd098fd836cf6661628af9
-
SHA1
d1896b65824f7004bf96d89160c240cf4b5a3d1a
-
SHA256
e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59
-
SHA512
400852d4ded45e85551975470d39f311c546cf9ea5453c5fb1ffae936e16503577876bb9b2957b08698c9a80b93f9b788e7cd9a7eb9d9ea84dcc2f9553bd10d2
-
SSDEEP
1536:PBgVp/YcrEfWHLWjd0Alcz2CHGkO7zyj8y2mU+RPhqUh:PBgVpjLAlcKlzPyjFUAPhh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 8 5096 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59.exe"C:\Users\Admin\AppData\Local\Temp\e6b65720edd970ce57fa138adbefc95360c8e06e7156880a2ad47a53f97bdd59.exe"1⤵PID:5096
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5096 -s 3002⤵
- Program crash
PID:8
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 5096 -ip 50961⤵PID:992