Analysis
-
max time kernel
124s -
max time network
75s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 02:32
Static task
static1
Behavioral task
behavioral1
Sample
aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db.exe
Resource
win10v2004-20220812-en
General
-
Target
aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db.exe
-
Size
412KB
-
MD5
a3880136718ca1d75434fee816f85bb5
-
SHA1
56a9d2250c142d66a20fa677092b41bf1244ab47
-
SHA256
aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db
-
SHA512
6fa05dbb851018eae79a952ce58672d4fab2551d227dfc73ae50694627620e3760fcc1a982a68ed981309c55db33a8973bacdad674e0f4a68be2abb8415ff40e
-
SSDEEP
6144:4xq9Uttp1eWrXau+d8T5GbD2h3Y6tIi/VZKMJU81miGrzbHmgt3E7:4xEExrXZlG/2h3CiNsMJWrz7BF
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1612 4876 WerFault.exe 18
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db.exe"C:\Users\Admin\AppData\Local\Temp\aa3d8a57a1f8a598e2b7222f8fb24fa0f5b6a601eeb4920e04befcc1e6a185db.exe"1⤵PID:4876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 5522⤵
- Program crash
PID:1612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4876 -ip 48761⤵PID:4872