Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2022 10:16
Static task
static1
Behavioral task
behavioral1
Sample
d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae.exe
Resource
win10v2004-20220812-en
General
-
Target
d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae.exe
-
Size
210KB
-
MD5
0521e4ffc8a1bec6773080c71afca7cd
-
SHA1
1cbc1ff53cfcf44bb4e28e240301ba4bce9d2a6e
-
SHA256
d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae
-
SHA512
affa04b7c2ef32a722ce08c1d15ccfcb70428b31aad8a17df1a71c915064b9e3aa0f43d0ccf63b680a09f495db95f9bc23ab6f8975e52c4b6645c03b2d822fd0
-
SSDEEP
3072:+zFjNxS92VeDZ68+9uTo83YUxr6XCwDXIIq/ck5BdBhhmjhLzbFS:+z9NxSSO+9L83qbTaZBSj5zM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5000 4084 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae.exe"C:\Users\Admin\AppData\Local\Temp\d428c6a3e1e29a4731c85ca2a349cf4b1dd15fcc0d6135c58740bb555d57f6ae.exe"1⤵PID:4084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4084 -s 2242⤵
- Program crash
PID:5000
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4084 -ip 40841⤵PID:4124