Analysis
-
max time kernel
70s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 07:25
Static task
static1
Behavioral task
behavioral1
Sample
791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1.exe
Resource
win10v2004-20220812-en
General
-
Target
791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1.exe
-
Size
41KB
-
MD5
01e7fe29c1a855289d38832d77d0ff90
-
SHA1
75655e00f3dce91afc9c685cc46d85b487ab66fa
-
SHA256
791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1
-
SHA512
6401f3951251fa1e77593de22fc7fa2820616880c99a8ae23bbf110e1f01083895655ae85fa73e42f3a94834a28378a87e0d501d1782292d78abd15b00a055b8
-
SSDEEP
768:Y5qH7m1pcTY+rcKN2rnoA2YQTXWEFC3WT7sPK9TRF4Wa9WyYaO:fH7m1pcTY+rcKN2rnobvXWCy2dZ8Wa9a
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5104 3984 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1.exe"C:\Users\Admin\AppData\Local\Temp\791076cffdbc0570c859062775dc66d1635cdefab3834dec571179881516b6d1.exe"1⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 2642⤵
- Program crash
PID:5104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3984 -ip 39841⤵PID:1412