Analysis
-
max time kernel
168s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26/11/2022, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e.exe
Resource
win10v2004-20220812-en
General
-
Target
062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e.exe
-
Size
186KB
-
MD5
fe381bef6572b010b55a160ad38395b2
-
SHA1
0640244490c6746dfa282c349e28f985b25cabd2
-
SHA256
062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e
-
SHA512
fd127bb6f027bd43555e62c76d3862fbdeff17ce1ad2c464c123f489625c29d7aeaa450fd05ee3138c05996eea13407f812a2500316affb3e3130e6390566c1e
-
SSDEEP
3072:CO2zXBllKAn7c4G3ZsVu5Exjui7+pLDOPt3cjhEvAMefzwzoc:COwXXcA7bG95uui7+pLNKvAMeffc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1492 5008 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e.exe"C:\Users\Admin\AppData\Local\Temp\062fb4cbb46d46fa3e052dd1ed1535aba63fd408f065329e2a449ddb7f77020e.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 9362⤵
- Program crash
PID:1492
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 5008 -ip 50081⤵PID:2132