Analysis
-
max time kernel
12s -
max time network
2s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2022 10:26
Static task
static1
Behavioral task
behavioral1
Sample
cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca.exe
-
Size
509KB
-
MD5
077dee9729645ae9bcd972f9ea4aa9f9
-
SHA1
9f0c90fcf686f66c7db6f0c6201371892b35138a
-
SHA256
cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca
-
SHA512
1444deb1eaf8aa7fd0b3956b32ccd92f82d860d5da0e89caaa2d13f4c4848cec3be9ed3441ecae5ebb3b7987c0427e0932afe23f5c247d9285f8c9820e747c4e
-
SSDEEP
12288:+P+by/yS5syS5Z5Z5syS5syS5syS5sy/yS5H:+a2e222as
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2980 2228 WerFault.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca.exe"C:\Users\Admin\AppData\Local\Temp\cd13ead3924c7bbca0a22d646630099ce893225bb11265cb2652c6bac56758ca.exe"1⤵PID:2228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 3002⤵
- Program crash
PID:2980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2228 -ip 22281⤵PID:4832