Analysis
-
max time kernel
123s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20/11/2022, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863.exe
Resource
win10v2004-20220901-en
General
-
Target
78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863.exe
-
Size
121KB
-
MD5
39bc0a4d0b01739560b6e8634006eadb
-
SHA1
b7e6c2eb1352c5442185a70d77ce2b81d09c9dc1
-
SHA256
78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863
-
SHA512
00ded3f4276a7a30dc903074292280efab0c691dc5905a30f0e41db901b58e023192fc272e7813f935bec66156e0bdabab2d85847e9a8455084386f041658f56
-
SSDEEP
1536:Bs1SgxMcAg6bzXHmyf8l/xMAmUWITj5YhVNJ01bY7iz82Uwg/ohNYWOSrd:Bs1SiMdLJ8DMoLYBbizrUwgAhNDp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2040 2632 WerFault.exe 59
Processes
-
C:\Users\Admin\AppData\Local\Temp\78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863.exe"C:\Users\Admin\AppData\Local\Temp\78f19192e217eee0960127e95aad1a347ea2523a0e99a16e8702b54b87f12863.exe"1⤵PID:2632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 4442⤵
- Program crash
PID:2040
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2632 -ip 26321⤵PID:1756