Analysis
-
max time kernel
98s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-10-2022 04:24
Static task
static1
Behavioral task
behavioral1
Sample
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe
Resource
win10v2004-20220812-en
General
-
Target
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe
-
Size
688KB
-
MD5
bf1d153460bc3dbdba5fb08974669773
-
SHA1
d49baf5c429bf43897a928270c519a8887d2fd15
-
SHA256
1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b
-
SHA512
0bf6e7070d94358c6b1d5f1b2e341c9e32b9307e10748a8a02ef88d78d5d7c6b8f4d0eaf0b1db8602cfd1d13a4814b1be816aff28f38349f0bad6af3e8e00271
-
SSDEEP
12288:PLn2lcU93IDvmqg6AejMlrxIafiPXIpnGz:PL2rYDuqg6crxI6HpnGz
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 560 4876 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe"C:\Users\Admin\AppData\Local\Temp\1637d209979fb5ec1c4b077890cf926258301e767b449330b48ef6f75f6cbd0b.exe"1⤵PID:4876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 5322⤵
- Program crash
PID:560
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4876 -ip 48761⤵PID:1284