Analysis
-
max time kernel
91s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 11:26
Static task
static1
Behavioral task
behavioral1
Sample
e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f.exe
Resource
win10v2004-20220812-en
General
-
Target
e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f.exe
-
Size
708KB
-
MD5
a32a8bcb8b0899cc2f36e8a989f20fc0
-
SHA1
8dac66e043ccc26e2042f33d322a7cdd772b0df2
-
SHA256
e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f
-
SHA512
b514a5ae2666f2707817b8e1adb69efa957ea6ff3d1edd629c67bb228cf71dbd5b8dc2f4706bab27dfa382b7ff07616fb73dbf39c4fce032ff5d62a5425b66c2
-
SSDEEP
6144:cl1LYIDmLr0inpCCO5FwRN/92gQqDBXKvkC3qT1NbG4yvS:+YIDmLr0i8DMGgQMW6hl
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 948 4356 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f.exe"C:\Users\Admin\AppData\Local\Temp\e13cc3478f05a39c7b377e7d9c0077d0a2ab0ff2a25422bc84409a2148ffde2f.exe"1⤵PID:4356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4356 -s 4242⤵
- Program crash
PID:948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4356 -ip 43561⤵PID:4140