Analysis
-
max time kernel
179s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:49
Static task
static1
Behavioral task
behavioral1
Sample
6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe
Resource
win10v2004-20220812-en
General
-
Target
6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe
-
Size
573KB
-
MD5
52c5589ea3cd195d7435c73b3d4393a6
-
SHA1
ae7ae1aaac2c1d5a95b50255a19a30eba726747a
-
SHA256
6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55
-
SHA512
82c459d4640a94f0834864795acc3ebadd5be3e93403a5170a66fed32f29d1185ef59adb8f9a574f9f54806ccb7b047a2e890b4d3ca4a2404e33a69aed5139a0
-
SSDEEP
12288:yYiVrMG6hZqjxpPdtjG+PD2Raoez/LSsPg:yvp6hZcjPFbTN3Sog
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4724 1536 WerFault.exe 6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe"C:\Users\Admin\AppData\Local\Temp\6c4d63b1eab52134be28260d48d4035c48ca5de645a901020e94c0a395f80b55.exe"1⤵PID:1536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 4362⤵
- Program crash
PID:4724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1536 -ip 15361⤵PID:1448