Analysis
-
max time kernel
138s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 23:53
Static task
static1
Behavioral task
behavioral1
Sample
5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f.exe
Resource
win10v2004-20220812-en
General
-
Target
5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f.exe
-
Size
339KB
-
MD5
91c2d5b95994d2771e36730a6edf4f9a
-
SHA1
4cfaba1091571127b6b0cda6524ac85dddda57d9
-
SHA256
5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f
-
SHA512
8ceece0a76fd92bc3cb9330968312f09db743929b4799ce9f70eb8691d5d952cd1103467e85727b5c3231bf906d94a2b478141d80aa89cbe465773517507b112
-
SSDEEP
6144:2Ed7thFwyBQUKqZeRW/5g99wzAJqrqEKnZXQyVN9ZCPJ7cnQvv5:2EPhKqQGgCC9wc45
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2628 808 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f.exe"C:\Users\Admin\AppData\Local\Temp\5a4ca15533c1164bc6fde2a04cf97fe49da3b58239a25dc5c3181a238a950f1f.exe"1⤵PID:808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 808 -s 4002⤵
- Program crash
PID:2628
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 808 -ip 8081⤵PID:4584