Analysis
-
max time kernel
180s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23/11/2022, 20:22
Static task
static1
Behavioral task
behavioral1
Sample
7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3.exe
Resource
win10v2004-20221111-en
General
-
Target
7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3.exe
-
Size
27KB
-
MD5
5a7fd916911ae1ea83cae3a070d0ca2f
-
SHA1
3fa65738a510643601ea1099f013d5ba01dab3e2
-
SHA256
7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3
-
SHA512
a6ccec351e9fccf38906a3b314f9bf41a47c12f46390a29dd56840034cb2415bad5fcbbbb0bc6231ba8eadd4379e07c86cfd915843b3f79628aa176b21b58d1d
-
SSDEEP
768:9ZRk7lhu+pDMPeHcSZKoiccHLGQbuYSPG/bT594:36zDMPeHRpcHiQbuYSQn5O
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3980 1548 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3.exe"C:\Users\Admin\AppData\Local\Temp\7345ac0492cbaf26e962ab8f14afa583fae871858528fdaead4439b8f600c9e3.exe"1⤵PID:1548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 2762⤵
- Program crash
PID:3980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1548 -ip 15481⤵PID:1500