Analysis
-
max time kernel
189s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 23:05
Static task
static1
Behavioral task
behavioral1
Sample
6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe
-
Size
65KB
-
MD5
1222d54ffaf8a9767d8fd586e4713207
-
SHA1
1f77d2be88928024a4b9203aac76093d3763bb26
-
SHA256
6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1
-
SHA512
e854e39c4f25dec82a07b36e7c95f4e5ce3533d4178f1438d70c4473b715e468922b974b841a14fa4c1ce518a88bdf2cb83f3153a14f2e3b3e7b6311060f6e64
-
SSDEEP
1536:c/dvQFZ7Fxqlq+MLMRqyBpB+j5eBYGp4mh:c/dv2ZFxqMFyBpglYvim
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3808 2152 WerFault.exe 38
Processes
-
C:\Users\Admin\AppData\Local\Temp\6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe"C:\Users\Admin\AppData\Local\Temp\6bb88b7a35231d78dda73d6a707769843d49fd2d1a54af3589d2ba5cf749f5d1.exe"1⤵PID:2152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2152 -s 3322⤵
- Program crash
PID:3808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2152 -ip 21521⤵PID:3488