Analysis
-
max time kernel
139s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 04:16
Static task
static1
Behavioral task
behavioral1
Sample
5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4.exe
Resource
win10v2004-20220812-en
General
-
Target
5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4.exe
-
Size
42KB
-
MD5
35f6c1ec41237044e27fe6fce8fcc5d0
-
SHA1
632a4e519820ed6442f77b29434b2f902c9e0890
-
SHA256
5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4
-
SHA512
11f471febfa22bdbfc6c361711f0e82ed246505f69b62aa166ebd20070cd33ecf27e73c5fd604aee3511467563ffa99fbaa986ed55317a09cbf7805590972308
-
SSDEEP
384:P1PfSSAWLRtfvnapXOyzlsmNxAvsg1Kuk2Pj6V6j4SHndcc4syqzGIC4AzmMDRu2:P1PaSZfvnaEYs+S1/km6Ccc4sADk2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2132 2816 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4.exe"C:\Users\Admin\AppData\Local\Temp\5a7fe163ebde0bb92d9a68e7da0421bfc40aa7d1655a12728f55777a8a6fd3e4.exe"1⤵PID:2816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2816 -s 1882⤵
- Program crash
PID:2132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2816 -ip 28161⤵PID:4752