Analysis
-
max time kernel
153s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-10-2022 18:00
Static task
static1
Behavioral task
behavioral1
Sample
5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94.exe
Resource
win10v2004-20220812-en
General
-
Target
5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94.exe
-
Size
47KB
-
MD5
849acc18b0ff61989ab92f88c506d620
-
SHA1
cdf8cefe79736260ae52e2a87a29f0781ed8e9a2
-
SHA256
5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94
-
SHA512
43dee2f84d07a7bc24fb4ee4b89a070059d32ffb51455c2497dc68fff153245ed6bfd2b6fcc70b97b92fd313a94f865c4eb8df9337dd2535fd7324b609078fc2
-
SSDEEP
768:4x1/tP1WCSSDaXdF+lF7P7J5reaCn+9JO2shY8PLUpb6VPvYqBN6cNFfAXXGi9GF:4x1/tBSY+A37feaCMJDmYsLIb4PvYqH3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4544 4348 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94.exe"C:\Users\Admin\AppData\Local\Temp\5f007bd670fb614efb5baf32887aed5cbfd900f771c8f9dab902f37ba8de5a94.exe"1⤵PID:4348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4348 -s 2842⤵
- Program crash
PID:4544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 4348 -ip 43481⤵PID:3668