Analysis
-
max time kernel
139s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 06:25
Static task
static1
Behavioral task
behavioral1
Sample
013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8.exe
Resource
win10v2004-20220812-en
General
-
Target
013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8.exe
-
Size
512KB
-
MD5
07f92d01cc08584af1562f3a6800f000
-
SHA1
5e29272bcdc07626208090fa22740834a97dc9a1
-
SHA256
013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8
-
SHA512
7014d100ea36e695ac24e3e2d802d3c74a6b33fbf725d52321a888c2bdd8f9def02938e93c2c335a5683414c66e23a5babcec6b9c06fc9e0e3f92ce598b82bfc
-
SSDEEP
6144:6keJdtgMnXURRwU//QUYMXDYDp6LBquvvmpwNzrX3o2LhNTo7LK142FL/6waNql4:6keJdtgMXUWUgUYMXDYMBqro3oDsj4c
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1680 1032 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8.exe"C:\Users\Admin\AppData\Local\Temp\013b2f6760093b54ae0e6967356c5dc671765896cd6247fb5e78a3f3eec10df8.exe"1⤵PID:1032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1032 -s 4962⤵
- Program crash
PID:1680
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1032 -ip 10321⤵PID:1120