Analysis
-
max time kernel
148s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 01:16
Static task
static1
Behavioral task
behavioral1
Sample
6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe
Resource
win10v2004-20220812-en
General
-
Target
6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe
-
Size
317KB
-
MD5
25dfa44c9f23557e4e831865e470a080
-
SHA1
886963a8a22a6fe8c2baf69725051c0a3f45ce07
-
SHA256
6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521
-
SHA512
e635a67a228a8dae274e4678107be848ef0b9cd3184c9077075e669d0a768ec4f24dbf653b44bcf8ad01ee4bc6a25f44187ebb288ed9f7d32950971ac874beae
-
SSDEEP
6144:3KXckL/daY0yFTL4nLLuB4tiUGYxKMe+uCl3s:8EryFTkuYxhHuCl3
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3104 4844 WerFault.exe 6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe"C:\Users\Admin\AppData\Local\Temp\6d75d69b3290807c1d04089aa89e5610b578464f4556be6c297e7eb73d2ab521.exe"1⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 4722⤵
- Program crash
PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4844 -ip 48441⤵PID:4776