Analysis
-
max time kernel
203s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
30/11/2022, 23:30
Static task
static1
Behavioral task
behavioral1
Sample
ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122.exe
Resource
win10v2004-20221111-en
General
-
Target
ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122.exe
-
Size
264KB
-
MD5
ab6534a9362086adef430d61c6029a05
-
SHA1
42abf1baba784106750e26baea0ca29db5d8b2c2
-
SHA256
ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122
-
SHA512
4207b8594abbf171267a97fbaa7716102d7df1e2b151800791cde9f899b1f9e5c471a627d2a6cf29cd086cf21c7ae77de0dd2adad0e7a04a10bf522592110195
-
SSDEEP
6144:lCvlnrIXXXIxTMCbe2VbzHIGXU7QNU5Uzf+EN5gne5DOTLIAGYXXXXXXXX57TrHC:l8pq2FDVN2nENGnf1S
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4924 832 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122.exe"C:\Users\Admin\AppData\Local\Temp\ac3340a90696375dcf09223254196ceb2363ced44c8148f236519df06165f122.exe"1⤵PID:832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 832 -s 4402⤵
- Program crash
PID:4924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 832 -ip 8321⤵PID:2960