Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 04:01
Static task
static1
Behavioral task
behavioral1
Sample
451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4.exe
Resource
win10v2004-20220812-en
General
-
Target
451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4.exe
-
Size
143KB
-
MD5
552114f16f9c6970d9dbb3a28c375bff
-
SHA1
128fcdcce2577fdfca5a25a7a3103c677ec45648
-
SHA256
451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4
-
SHA512
bb9b57bded97e435a6b46425658fc7ba6bfb6bbdd90ec38ab3fc5d0b5a728101d10de6df1973068f60f799ed62acb59b8d5e17c9e1d2d4cd263a857c944b41c8
-
SSDEEP
3072:23XhkwhFrSnKex+LOqHv/0w984Qr+8mrSnKex+LO:23XOwHGdxwO6/0w984Qr+8mGdxwO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4212 4864 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4.exe"C:\Users\Admin\AppData\Local\Temp\451ef93a3b43a1b679fd372eb27ad1409819105358bece65fe89c512dbc921a4.exe"1⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 8242⤵
- Program crash
PID:4212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4864 -ip 48641⤵PID:1840