Analysis
-
max time kernel
67s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350.exe
Resource
win10v2004-20220812-en
General
-
Target
aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350.exe
-
Size
184KB
-
MD5
5ad5dbe59f02167f9d0ca828620392ec
-
SHA1
3723f8cebbc18e6b5502b924ae635b7ffdaef665
-
SHA256
aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350
-
SHA512
29ce36d8fa332f6f181d00d9653b277dc42806ac770bbf7c615d0d25fe39aadd0a938a53328b4beb5b91bb3bc7bb40a19c43accc1bba9aafe145c58e900a3f6f
-
SSDEEP
3072:/kVm95YjGMwW4dcGktyL2jmikZGLqM+aBwctrmQ3+lNYpf+gVameUqkfbhNJUdac:/kVm9aGM34i62jZkZiF+aFrmS+lNYofJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4780 2328 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350.exe"C:\Users\Admin\AppData\Local\Temp\aa75fd371886774f2fe46998dfb7db619d999c918e8c21157449dc7c3255b350.exe"1⤵PID:2328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 4882⤵
- Program crash
PID:4780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2328 -ip 23281⤵PID:1652