Analysis
-
max time kernel
185s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2022 10:22
Static task
static1
Behavioral task
behavioral1
Sample
01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89.exe
Resource
win10v2004-20220812-en
General
-
Target
01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89.exe
-
Size
126KB
-
MD5
387c409985b89eb95a56922d71d7d567
-
SHA1
c4b1a846ad2e6e4d7f673a56043e4e9d0290d5b2
-
SHA256
01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89
-
SHA512
515372e8648bf0e230c3614f37322548c4a4a7ebdded1295561c8ef0c7de75cf49fb29ac562984db9d39e96952d9ff7676520d93f964133b233fd9128be30693
-
SSDEEP
3072:Bjv3ln6laDj6D+X5jsGMCTqxo3AhfglFcq/c5DmocQ7jX7VUnYN:BjvmaDj6CX5j7hTYZvXp2Y
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4764 4820 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89.exe"C:\Users\Admin\AppData\Local\Temp\01531394eae412c83f82ea167d4803b5043239211406630343c139f9d5e5be89.exe"1⤵PID:4820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4820 -s 2922⤵
- Program crash
PID:4764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4820 -ip 48201⤵PID:4052