Analysis
-
max time kernel
71s -
max time network
69s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 23:23
Static task
static1
Behavioral task
behavioral1
Sample
5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b.exe
Resource
win10v2004-20220812-en
General
-
Target
5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b.exe
-
Size
96KB
-
MD5
0badaaf1494dcfe148e831213b46366e
-
SHA1
37329ab3ea311bfb1bb90592854d87114c1f6efc
-
SHA256
5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b
-
SHA512
164d6144d34f587565ebb070fa0e9605c6adc5618063825575b04584a2af97dddbdcce0844eaa3060421e784d33982b316a188d3fbd450d8e63f5f75f24a7fb4
-
SSDEEP
1536:hOeTaQoIF3tsnoYwZeaapXq8OmNR6ayv3gR07Wt5hDQ2o/Wb6u8JMxOLFa:5aQo03tPdZeVXq8xNR6tgR07WtU/Wbft
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 392 1364 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b.exe"C:\Users\Admin\AppData\Local\Temp\5f7496da54479354f5f4043d062cb8c1378eb5b54197bb745bd056089512b69b.exe"1⤵PID:1364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 5162⤵
- Program crash
PID:392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1364 -ip 13641⤵PID:4824