Analysis
-
max time kernel
146s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 14:04
Behavioral task
behavioral1
Sample
86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10.exe
Resource
win10v2004-20220812-en
General
-
Target
86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10.exe
-
Size
89KB
-
MD5
ec578027b4039737cf57ea8c4855dddb
-
SHA1
6572b17196afb566f0c5ca35baefa84d666e3e69
-
SHA256
86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10
-
SHA512
08598a263900c22ca002870d45223e6a096ee0fac3176a7a1467ece23bad05030035e4fbb0fe7188fcf1da179b82c0447173fc451e6a3d07cdef7bcc32901d86
-
SSDEEP
1536:dC6cIJDCV9qcOb6I630Cef5+EDC9q4E9Wq6U0mURXjuc9Fr8gvsfvh9LoKWlu+W:d5cwC2A/30LfwEDC9zE83ljd14Mhlu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4476 4768 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10.exe"C:\Users\Admin\AppData\Local\Temp\86d13ec728f8374ef9de0483ff43b5c9f12271d2349d60dc367b19e338d05c10.exe"1⤵PID:4768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 2162⤵
- Program crash
PID:4476
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4768 -ip 47681⤵PID:5040