Analysis
-
max time kernel
144s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2022 23:16
Static task
static1
Behavioral task
behavioral1
Sample
f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5.exe
Resource
win10v2004-20220812-en
General
-
Target
f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5.exe
-
Size
629KB
-
MD5
0f632dff8040035751e61015ede41160
-
SHA1
4d8c76e75e2e3b0fe27288cb31cb9fe3293d9d87
-
SHA256
f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5
-
SHA512
a616399b5464f2653fe9c7b32b85c1bfbe1b082e16ad2b6f2a62f7060571de700ca90f7862094aa4ce8edbf6b4a85d4f6471734fc0d68e8df1b62d843d6c76c8
-
SSDEEP
12288:4mfaXi7lJ+iQeN/7YkrWBfWhvRhQUysqw:BayRJ+iQeN/7DSBfWhy1w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5000 1716 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5.exe"C:\Users\Admin\AppData\Local\Temp\f1fd51c99b64366826014ef0fc7bde3f05bc611024439ed2dc19457697986ea5.exe"1⤵PID:1716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 6962⤵
- Program crash
PID:5000
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1716 -ip 17161⤵PID:1952