Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 18:54
Static task
static1
Behavioral task
behavioral1
Sample
514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d.exe
Resource
win10v2004-20220812-en
General
-
Target
514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d.exe
-
Size
332KB
-
MD5
01c81da66fd719b96ba3421c90e8c398
-
SHA1
91624eae0a8a81c00f5e5e4abaa401f4fbb8beac
-
SHA256
514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d
-
SHA512
18872dd54f7b708c2212507756ce55ef3002d1fb0cdd329711425ea9a280aecd5e2263255cd970a58148fc1ba6be3855ac0b79f9da0e8499161f385ed2f6f5b6
-
SSDEEP
6144:bhmkZkgelPgepycU5c10c1mZ+yDE9XFgn7UhT1AAhlTJjnBr6:bhmkZkZhgepFF/mZp41xViqfnF
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4540 4800 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d.exe"C:\Users\Admin\AppData\Local\Temp\514372ed158f8c58ab5ab17c66a31238fb9c80cfadb4a927b296677b9f93814d.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 5042⤵
- Program crash
PID:4540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4800 -ip 48001⤵PID:1656