Analysis
-
max time kernel
99s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 19:51
Static task
static1
Behavioral task
behavioral1
Sample
15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521.exe
Resource
win10v2004-20220812-en
General
-
Target
15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521.exe
-
Size
168KB
-
MD5
a37c0f6fb77e753ead1ad427a32c8d00
-
SHA1
f5547549806f4210fd45bb6938589e946de13599
-
SHA256
15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521
-
SHA512
ee491f5edf8cabcc74f28475a51e53dd88e7f3dd14833c05eb195fea65b1f528c50074d827f5350480c824913ad678d4d7205256aeba2e0b5496d343350f5f03
-
SSDEEP
3072:3kVsSp2j2U3VOcpV7PLdfom6RsTERabzK4ndzv+f2rXnuxGoL3xh4slqq7WG8eL:3MMqCzLdF6RsTE4PR+f2bnSZL3r41qJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4056 5080 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521.exe"C:\Users\Admin\AppData\Local\Temp\15d3568caf46524dc7da3afec7b36f15d921a7f2d16222f430a26874bc20b521.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 4762⤵
- Program crash
PID:4056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5080 -ip 50801⤵PID:4288