Analysis
-
max time kernel
151s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 06:08
Static task
static1
Behavioral task
behavioral1
Sample
579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5.exe
Resource
win10v2004-20220812-en
General
-
Target
579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5.exe
-
Size
306KB
-
MD5
84b3de672a9c065762697eeca114d435
-
SHA1
629503219774282bdd4f262d3d9deaa0ce808dea
-
SHA256
579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5
-
SHA512
7c03c8f4e280716ba4fdf68d22e825cde147b5e12fe7024060b0cd78e95071f9b3732679f941cff083f119faea222c74cd7a1de586214edb0e86fd8f9b084fd0
-
SSDEEP
6144:32HFJl/o1uCdiVGeBjTpedI85AhtGU/ugJFD+5A6Afrct/SZPrIokuG:UFo13NejwAv/RzwAlriGUokuG
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4984 5008 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5.exe"C:\Users\Admin\AppData\Local\Temp\579ac9aba65d1c7dc282d8098ce3cced90980c1b7cf0bda5a5ebdbc3578786b5.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 2922⤵
- Program crash
PID:4984
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5008 -ip 50081⤵PID:4156