Analysis
-
max time kernel
137s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 18:35
Static task
static1
Behavioral task
behavioral1
Sample
d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d.exe
Resource
win10v2004-20220812-en
General
-
Target
d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d.exe
-
Size
388KB
-
MD5
0096dfacfb0098c598218bb83ab4d0c2
-
SHA1
c5669551d44698fc1898a2f809904d583a6be600
-
SHA256
d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d
-
SHA512
1590f1792fc32e42f90b995aefecc9f33affb71f2abc8c8668f8044bd11ef6312f39024eebefefe07f9ce4f9aa72df8cd08e08b223b9da223a1f46886b766294
-
SSDEEP
3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIJU+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwIJU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 616 3520 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d.exe"C:\Users\Admin\AppData\Local\Temp\d491468644e219259fbc8725708c0c5fc6e8ca338591cf79802c1f8051a79e0d.exe"1⤵PID:3520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 2882⤵
- Program crash
PID:616
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3520 -ip 35201⤵PID:4808