Analysis
-
max time kernel
316s -
max time network
408s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 03:37
Static task
static1
Behavioral task
behavioral1
Sample
c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6.exe
Resource
win10v2004-20221111-en
General
-
Target
c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6.exe
-
Size
303KB
-
MD5
a971b0ea4901d6911dfb29971d6d538c
-
SHA1
ae89f6436049b45975cd72a8be1886e96e7b0f83
-
SHA256
c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6
-
SHA512
47c94e784ac99a1904eec928d700780bbed450b6935a01fa0fe99d8289ce5b6a4c783db6e16daab78dfcacbe7060212606c0d47b95bd0ae32376e390b9f547c4
-
SSDEEP
6144:g+lq917GsN8fU+3mKUT2VCuun4cE4TyLvTtqRK94Z:9q91vQU+3mDTIbU4tq4vT444Z
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2248 1084 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6.exe"C:\Users\Admin\AppData\Local\Temp\c5b07b4d969b9d6a47e324f93c7970ccccee8090e9983f6ea7c47a7f13ab34d6.exe"1⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 7002⤵
- Program crash
PID:2248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1084 -ip 10841⤵PID:4316