Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 00:14
Static task
static1
Behavioral task
behavioral1
Sample
a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e.exe
Resource
win7-20220812-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e.exe
-
Size
98KB
-
MD5
c444b88a4fe3ea08bf4426dee9907185
-
SHA1
943e015fc350ef9ec916feda2342817210824465
-
SHA256
a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e
-
SHA512
a039d100365951cef3af69f31aa896a6b567c85e2000945b3c100805ef089ec259859e3eaa2fc297a3dac06e0975fd9bdc21ff63c220b1af2fd62cf220b8999e
-
SSDEEP
3072:CbahITBTPGgn3mJmJyT+PL2F1FaaaHw7Koj4rtx:B4T161FO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1360 4656 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e.exe"C:\Users\Admin\AppData\Local\Temp\a13941b5b3062a723258dd44095c5cf37741d1acc7f7fa426344418c969d252e.exe"1⤵PID:4656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 1522⤵
- Program crash
PID:1360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4656 -ip 46561⤵PID:4328