Analysis
-
max time kernel
173s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 00:58
Static task
static1
Behavioral task
behavioral1
Sample
95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111.exe
Resource
win10v2004-20220812-en
General
-
Target
95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111.exe
-
Size
266KB
-
MD5
3d62738fccc78591cd43402d29c45786
-
SHA1
d4ab8f63693a3dc71f75656f8196cfd7c5d19159
-
SHA256
95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111
-
SHA512
e3cfeb039d23ceb6a36a4adb5446deae3ceade16e7e1c27adcdd578547f05a5b193ffade1ced54cdea6ca453245805d8adf8e15a1a2affb381e3becc53ff36cb
-
SSDEEP
6144:L0/08B4q4EYmwGT5zqMPPYgyhH8TrTUuqqLjHI8d5SAM:L0/3B4q4EzwGNzqM3Yg1nL95nM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5080 3740 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111.exe"C:\Users\Admin\AppData\Local\Temp\95c36d9439fb59928e1b9614732fc239701fb352023a7179cafbe5f9cb52c111.exe"1⤵PID:3740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3740 -s 2642⤵
- Program crash
PID:5080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3740 -ip 37401⤵PID:1424