Analysis
-
max time kernel
112s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 13:01
Static task
static1
Behavioral task
behavioral1
Sample
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe
Resource
win10v2004-20220812-en
General
-
Target
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe
-
Size
300KB
-
MD5
a2a211edc8ea64fb8ffd4a5ee1c7ef60
-
SHA1
11c58ae051e5e840c99b796334a153656d097c5f
-
SHA256
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952
-
SHA512
09c1e2c4d77d080b71e4bfb62e5cf74ca3eae1220e333b710324780e6cca07ef572283e6ccd80bf2f172ee4cbe85eaf2b815744204a691792dabd25c5d69930c
-
SSDEEP
6144:zOMzb0volYkmRVmvDi2ulmXhF6QdpppJiTi08yhE:VdfmRVme2amv6WFyhE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5032 3708 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe"C:\Users\Admin\AppData\Local\Temp\537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe"1⤵PID:3708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 6122⤵
- Program crash
PID:5032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3708 -ip 37081⤵PID:4920