Analysis
-
max time kernel
316s -
max time network
512s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26-10-2022 22:28
Static task
static1
Behavioral task
behavioral1
Sample
b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe
Resource
win10v2004-20220812-en
General
-
Target
b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe
-
Size
744KB
-
MD5
7f3cc059ffc6c11fe42695e5f19553ab
-
SHA1
f22555d2898e3486b2c628a2e523657f5fbbe475
-
SHA256
b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a
-
SHA512
441654be8d2f49ae98d60c9a71f903d5bc861fa3c61806f78c93ed04cce1c9e1efa75961813c11119b1e1db8b181aa237e4ae0cb24fa8a9f1a7d2590229c98fc
-
SSDEEP
12288:qq/OIg++nlSl1ljxOzAqzmkZh9Twx2p9SoBUkAKL9Aus+8:qq/OIYlSl/jTqzmMhwW9KgL+
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4548 4512 WerFault.exe b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe"C:\Users\Admin\AppData\Local\Temp\b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a.exe"1⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 4362⤵
- Program crash
PID:4548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4512 -ip 45121⤵PID:4364