Analysis
-
max time kernel
138s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 19:34
Static task
static1
Behavioral task
behavioral1
Sample
addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9.exe
Resource
win10v2004-20220812-en
General
-
Target
addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9.exe
-
Size
1.8MB
-
MD5
d4fc7d0d4dac189a904a11318ca256c6
-
SHA1
4bd9bfc90c8d89cb8d862009d54df7ecc1bc4a34
-
SHA256
addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9
-
SHA512
2a1b9f9355f56eab31cabc21dea6d02dbcbf16b1751ab62112c37c1ab411dcf148b7ebf3356b62fe7228abbc253d9a5fe509822c77ba29d3d428b097a5cdee8d
-
SSDEEP
24576:1ksyuIDLrvkQkTZaqdiXSp0c02uFG6dAk3xMXUDi6T9YZnV9eJIoT6HeIwUDim:isg/aTZaqdwk0c05HGiCC5THCV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4944 4588 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9.exe"C:\Users\Admin\AppData\Local\Temp\addda278d988f43181179c296d1c56723ec7f5234d362e89c205b5c1245c99b9.exe"1⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 5362⤵
- Program crash
PID:4944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4588 -ip 45881⤵PID:4968