Analysis
-
max time kernel
128s -
max time network
6s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 23:54
Static task
static1
Behavioral task
behavioral1
Sample
f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d.exe
Resource
win10v2004-20220812-en
General
-
Target
f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d.exe
-
Size
44KB
-
MD5
0c90f4c720c9864652045fe8bc377d71
-
SHA1
1dc95dd2e9913386cba6b6c0dd923c1d3389a5c7
-
SHA256
f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d
-
SHA512
ee37a0417c92f196ec27a67b5d2326fe7b0cd85532a9f6159f5cca8ec0d379f82a9c109f2e8b936fded549f779607858b4da8037064f12a4aa7bf3d3ca334b3e
-
SSDEEP
768:S9Dod0+amflyr7Z8XD1hJZk7WeUNWryA4WONy2Y772:QDod0+zK7ZmqWeNrccR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2284 4036 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d.exe"C:\Users\Admin\AppData\Local\Temp\f640bbb8d3d3ee883812a86bc0198c8512e41dde2aec8bd450ac12ce7501381d.exe"1⤵PID:4036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4036 -s 1882⤵
- Program crash
PID:2284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4036 -ip 40361⤵PID:1252