Analysis
-
max time kernel
89s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 07:32
Static task
static1
Behavioral task
behavioral1
Sample
c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe
-
Size
130KB
-
MD5
3409da432b765ea9e2d2c82ee73b28e8
-
SHA1
152904705d1cca4790fec9d538e1c3d9797e3f30
-
SHA256
c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5
-
SHA512
b70f6dd70030eab82aa61713131729fb600960cfe658909082ceaec1be81010c390b687a0edf97ed8ba5ac03e633993a42ab48d424525d4c80c10061b68e0a93
-
SSDEEP
3072:wO42/uCuK/yTg9MLTjLcRCozujvJfGdgmQI:p43eymMfjLSmmQ
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4768 3400 WerFault.exe 83 552 3400 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe"C:\Users\Admin\AppData\Local\Temp\c1fdfedbd34cd51cc049f1dde6a6c6c673d4548b8fa818922fea3b22495ef4a5.exe"1⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 3762⤵
- Program crash
PID:4768
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 4162⤵
- Program crash
PID:552
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3400 -ip 34001⤵PID:4908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3400 -ip 34001⤵PID:2328