Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 15:38
Static task
static1
Behavioral task
behavioral1
Sample
f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d.exe
Resource
win10v2004-20221111-en
General
-
Target
f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d.exe
-
Size
84KB
-
MD5
1a564f51dd6d1d4446d697aa0765b8e0
-
SHA1
d4eb6506dae1974ae0bb7e6b882e83ead20faf78
-
SHA256
f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d
-
SHA512
41591c96fdc390d5f6c45fb2ea8adf7b4efbfeee46ce5761468ce38206c677674665314e5b252da0c738441be8df965ce3e68796e60577f35ef5a75b6e755c7f
-
SSDEEP
1536:cvoQwWW0uzZKjqoMmfHlXP3qClQX2oooD+AyxArwIVJ9dMNm:cvJW0MKDfHVa8QXMmwI/wm
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3312 1180 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d.exe"C:\Users\Admin\AppData\Local\Temp\f5a1c5b383c6ca454aed0e58f2a1e9ae4c5fcb5bccf0ada782e0f9c50a29e59d.exe"1⤵PID:1180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1180 -s 4602⤵
- Program crash
PID:3312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1180 -ip 11801⤵PID:1512