Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 09:36
Static task
static1
Behavioral task
behavioral1
Sample
fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe
Resource
win10v2004-20221111-en
General
-
Target
fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe
-
Size
376KB
-
MD5
2bab389dd78111800bbc44448fb9abe0
-
SHA1
4c79fec1cd2c7f5fbe2e0d52e3e15107b9577674
-
SHA256
fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46
-
SHA512
4c606aa333b095d557ad8ba87c6a1082080596a9f22176c1c114cb12a319a84895c02108ccb50f69cb4662e2ad89215b06c75ad7928bd42388010477c11d26d3
-
SSDEEP
6144:wbksd6DrhpacgTGAidEl3yNhtFUaOrj0lMGWx1Lt3gv/S6RJm87ihVk67G4203+M:GzdB3yNhtcj0lM5x1LtgLRqhVkA92oP
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2720 1756 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe"C:\Users\Admin\AppData\Local\Temp\fb67d5b2645ead52ec4bb8c8e6f890a66a965e31cc0132500fd0d3373296ae46.exe"1⤵PID:1756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 5362⤵
- Program crash
PID:2720
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1756 -ip 17561⤵PID:1796