Analysis
-
max time kernel
119s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 03:36
Static task
static1
Behavioral task
behavioral1
Sample
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe
Resource
win10v2004-20220812-en
General
-
Target
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe
-
Size
732KB
-
MD5
930f2353b5a09d61480b62b5e5ce48d0
-
SHA1
58d705c8221572101fe18bf0d61b0b4572c78849
-
SHA256
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9
-
SHA512
a3c52a1fa2f35e23d8d8d7da8d18163b4eb438a532fa6e151676b6898c87a1b79395786271228d581d4e38f847f7ba10e190058cb1da6ccec081e1dd31ecde2c
-
SSDEEP
12288:yz0aEbUAXzlxeJnME05sgK2GWAapfhMrdMqosnrYs0uQFMPbuSSsPdi:yz0a2xjF5sgEW8rdvosnrXLSoo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5036 4340 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe"C:\Users\Admin\AppData\Local\Temp\4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe"1⤵PID:4340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4340 -s 5242⤵
- Program crash
PID:5036
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4340 -ip 43401⤵PID:4972