Analysis
-
max time kernel
199s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 04:25
Static task
static1
Behavioral task
behavioral1
Sample
6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681.exe
Resource
win10v2004-20221111-en
General
-
Target
6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681.exe
-
Size
767KB
-
MD5
ac8506a67fd92ce6d7b616852fd59717
-
SHA1
51c4da0fff87e98ea42540d915049b30fe5d510c
-
SHA256
6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681
-
SHA512
b2b3c72a1186c1596623f3ead40f6ae56a39e71a1f249f143566f00f835463fcc64cbbec767ecd30ece12dc10de50e368dc324666630a47ce96bba51d86296f9
-
SSDEEP
12288:5pMWo33eLf/jxcjkoh8Rzg+pIpWVKAHhjIdij4BnbMjvSeUOJRqqt8FWLsbjQqZh:5pU33eLHjxEo++VVKAHhjeiUVMjvSeU9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3280 2648 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681.exe"C:\Users\Admin\AppData\Local\Temp\6279e9f1c1f5cc5df72241a8df981a0d37b5c69b5b8422811f214cc3a146f681.exe"1⤵PID:2648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 2882⤵
- Program crash
PID:3280
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2648 -ip 26481⤵PID:4312