Analysis
-
max time kernel
113s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 08:46
Static task
static1
Behavioral task
behavioral1
Sample
bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057.exe
Resource
win10v2004-20220812-en
General
-
Target
bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057.exe
-
Size
154KB
-
MD5
4e60b0a9a0b23b03e99e84da1291a32b
-
SHA1
f9284c956bbd2cc8d89a6b05d3aff4a2782155c1
-
SHA256
bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057
-
SHA512
63f804b4558c7f4f9c8d054fcd9ca5b1cd1363c6004835e9566261ef76113ffe6d4d1ab0ecc20d4f68002ea53f75c1e8d0e6cb76fe6aca54831cc0f2490e16f2
-
SSDEEP
3072:sTtblzyLD6s8NOuvnzUqgwsQrvdaJknhv1b1ATJzBuih3iX8:gN58+pQqgwXvdaWh9JAC23v
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4948 4084 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057.exe"C:\Users\Admin\AppData\Local\Temp\bc6f7c0c3901a1ea8a6f48195212ca8fabb8f522e7f740257fd9b1dd1b59f057.exe"1⤵PID:4084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4084 -s 5082⤵
- Program crash
PID:4948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 4084 -ip 40841⤵PID:3192