Analysis
-
max time kernel
138s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 06:11
Static task
static1
Behavioral task
behavioral1
Sample
6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae.exe
Resource
win10v2004-20220812-en
General
-
Target
6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae.exe
-
Size
28KB
-
MD5
ab2a5579b6cf49a18f00e707ad44d6fa
-
SHA1
1cddffb9b591e7e5df8b7afcb3cc7e09971f02ce
-
SHA256
6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae
-
SHA512
85ddc435047d8acedf0944207f5c436ef966fe2323e576205b30a30ba362902f765bbdcdb24c6606a6bcf84524696c363e4714f623912fd029d72e68cebeca75
-
SSDEEP
384:Xy+ppmj1VlhX4WaXzfwwXNyiDx10jaQpRveBj0YUSHNpXoEqPQ0:Xy+ppmjflhXDMzfww9VypRvyLVqp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2688 920 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae.exe"C:\Users\Admin\AppData\Local\Temp\6bd804d02f178fd207125f25e5fd8b8826df34ad496ac1af03c2bc33f5f430ae.exe"1⤵PID:920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 920 -s 4602⤵
- Program crash
PID:2688
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 920 -ip 9201⤵PID:1672