Analysis
-
max time kernel
158s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 03:54
Static task
static1
Behavioral task
behavioral1
Sample
6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f.exe
Resource
win10v2004-20220812-en
General
-
Target
6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f.exe
-
Size
879KB
-
MD5
230edc153c3a5109a743902bfac223a3
-
SHA1
67cce3b8c30dc8bbf62a04afc9794aaff5399584
-
SHA256
6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f
-
SHA512
918d1bcc940cf6446cb17b57d3d006d08143600b1628eeb013de358d44cc69a2ee61d40c39b719239a688cfed5af2b2523263dc9c8ad2dc49f38903c5b89c2b7
-
SSDEEP
12288:EXIW8pfTBw+mKuAQ/v7uYdjFkG2GuNbZ3e1EFEj8bVww8N+G6s:UZYTPxuAQX79djp2GuNbZUEFEE6+G6s
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 668 484 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f.exe"C:\Users\Admin\AppData\Local\Temp\6403a34536613219d5270c17872bb96e640cfe2dd883ddd3d214bf1c290dea3f.exe"1⤵PID:484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 484 -s 4442⤵
- Program crash
PID:668
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 484 -ip 4841⤵PID:2692