Analysis
-
max time kernel
122s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 07:44
Static task
static1
Behavioral task
behavioral1
Sample
b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8.exe
Resource
win10v2004-20220812-en
General
-
Target
b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8.exe
-
Size
44KB
-
MD5
2024a039de99c8ff4e6f2402994bf240
-
SHA1
a80e7bc9e3f68f6478846a91717ea869098c709c
-
SHA256
b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8
-
SHA512
802cdf97faf800a752321a553e8672a0e1d98867a17f595665ce24fa395a25bc7cb12f46c1245645f7beefd2690f05ac830fd1fe219b34b5b6ca3772daf81a33
-
SSDEEP
384:N1hk51UX2dCvE/tE/9udJfYdZgYEpDbPI5pnZRhBJvM8bAc10H5o9hrpgg+dk:jqSGU8/K/uY6hPQ/RjfbD1nr22
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1604 4972 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8.exe"C:\Users\Admin\AppData\Local\Temp\b196e6090fbede5215a52f6f0bf277babd0300c31bb4ead020573b9ddfd9c9a8.exe"1⤵PID:4972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 1882⤵
- Program crash
PID:1604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4972 -ip 49721⤵PID:5024