Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 14:31
Static task
static1
Behavioral task
behavioral1
Sample
41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef.exe
Resource
win10v2004-20220812-en
General
-
Target
41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef.exe
-
Size
43KB
-
MD5
db76f48b24eb9c49ea01b2f67c2a0ecd
-
SHA1
a887d407ecd1ceda5f2a5972b3036ed9b53c9cc8
-
SHA256
41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef
-
SHA512
326899d4d0a7ab9592aef21619649975a3bec571773d29cc0d52bd85800df4fb9fa1da63655401d626563c5af73a4271eb96dec4f81c41ea27c48d5b7ad8e5bf
-
SSDEEP
768:/XXvUJUe13OYpPyPpS//nDXFIQB6WKEaeaCxYNH2fxowAdTmCk/tXp:/X/56OSeU7FIIPchQMJTmPtXp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4568 3976 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef.exe"C:\Users\Admin\AppData\Local\Temp\41951df475ad95ff6d13572af292ec1c2f64a4ecd6f009383f90f694f7b3cbef.exe"1⤵PID:3976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3976 -s 2522⤵
- Program crash
PID:4568
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3976 -ip 39761⤵PID:4440