Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 18:06
Static task
static1
Behavioral task
behavioral1
Sample
583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19.exe
Resource
win10v2004-20220812-en
General
-
Target
583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19.exe
-
Size
364KB
-
MD5
835abaecde3a5379cb21c39818fd26c4
-
SHA1
3cb76c0ba8e688e9bcd501a081849decddf482ea
-
SHA256
583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19
-
SHA512
ac68ea0fa9d503b76bf9b45b9ba5b0808b82fb782ec6833dde1de32563ffed91d084944842445c273319fa435304a8f05e11bf2eed049118dbc6a53c858c84fe
-
SSDEEP
6144:xbCdhZyzFF4IX0zE9NKFEWNFfK4CS0NwI52+fFBFFrkiA:xmdDW4IXxcXNkjN5Zf1Frc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4948 1604 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19.exe"C:\Users\Admin\AppData\Local\Temp\583f850bff6119b41fc81ee787d30ecd6c95f31a7921d7c5cd26de0206187a19.exe"1⤵PID:1604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1604 -s 4762⤵
- Program crash
PID:4948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1604 -ip 16041⤵PID:4620