Analysis
-
max time kernel
196s -
max time network
231s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 02:35
Static task
static1
Behavioral task
behavioral1
Sample
6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c.exe
Resource
win10v2004-20221111-en
General
-
Target
6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c.exe
-
Size
256KB
-
MD5
67398f8a025d47c38477c212d40884d2
-
SHA1
26292ddc50cc71a9b32ef9fb9f79cac4caab3375
-
SHA256
6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c
-
SHA512
d070f14b290d98a566b3707adca245ec5da93a142b0ac96c541fd7c597d52021dfb04658e99e0255e267a3dcdb18440fc6f9d1850aab89c4774146f1f13d90b5
-
SSDEEP
3072:JCn6vnipoZwwyQabYMkTgeLT+w2EC4j0oYb8e+jmbH7EMOjxxHr6xxr6GVyaFXoS:JbviYwwyQlTgALXqo1jmUZxL6xQGQggo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3432 4664 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c.exe"C:\Users\Admin\AppData\Local\Temp\6ce6814f1e22522ab448a1cca57847d55316532cea81405e5930a167ebf20b1c.exe"1⤵PID:4664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4664 -s 2642⤵
- Program crash
PID:3432
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4664 -ip 46641⤵PID:316