Analysis
-
max time kernel
94s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 10:08
Static task
static1
Behavioral task
behavioral1
Sample
c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83.exe
-
Size
870KB
-
MD5
9e78debfeb869e8a981824dcdb222531
-
SHA1
2351a165acf41ea2a28ac8bc651b9a65dcd3aa63
-
SHA256
c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83
-
SHA512
6cdce735104023e77282a47fdd2ed556d778f100cb73e270d5d2fc93699683bebb3a8a059865ec44afdda4419cfc548cf95a0ba1766e45076813df9047823457
-
SSDEEP
24576:r6UCTiDCmC51WuVctI1XM9sP3UmUK3xQ:r6Uuw4xGi42u
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1468 4952 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83.exe"C:\Users\Admin\AppData\Local\Temp\c8b59ddd5ec5848bb32768c7da719695658bee3487e4529e22a4782f6de1cc83.exe"1⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 4522⤵
- Program crash
PID:1468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4952 -ip 49521⤵PID:2836