Analysis
-
max time kernel
112s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 03:33
Static task
static1
Behavioral task
behavioral1
Sample
b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40.exe
Resource
win10v2004-20220901-en
General
-
Target
b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40.exe
-
Size
20KB
-
MD5
ad8ca73b7c9eace9ca787aaa0c0b1fe3
-
SHA1
033f88f3758a6c35f2d64fb802b58aa9d67a3af4
-
SHA256
b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40
-
SHA512
385862ed4a11e546ec0dbaceaeba88e233b5aa8f04f2aa6bf0c3d493d5c63b00ae91738ecb73cb8b01eb23168aa70f6289ec863549cf0ffe25221ad8c8a9b6aa
-
SSDEEP
384:vuQgxvoHNOcTq/1/EuOcFAGV8OPFfeaiPmBnK8vKs3HxgMhn:vdgxvoBc1/9OcF8IhhBnK0KCHNhn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3972 3916 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40.exe"C:\Users\Admin\AppData\Local\Temp\b0a32d2705db002d0422811061b94a56c23bf77e823ac30215cc26d315ba1d40.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 2642⤵
- Program crash
PID:3972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3916 -ip 39161⤵PID:4300