Analysis
-
max time kernel
90s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 19:59
Static task
static1
Behavioral task
behavioral1
Sample
a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d.exe
Resource
win10v2004-20220901-en
General
-
Target
a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d.exe
-
Size
75KB
-
MD5
71c8841bc40cc29104d20f580b74dd12
-
SHA1
2a5ebc3d931f8d184bb68ac01594127f6e9a3609
-
SHA256
a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d
-
SHA512
9d2ab448f5106f52895af1b168571c3478394feda6dc91d34119627fc73b91268e4cfab4fbe1172701478af01c37e3f07cd5999338b992f2afc10a1200e6b5ec
-
SSDEEP
1536:zYxsxRI6mwtCVwvNKH2h7b3wMjc7Ti+GMysDW:zYxsrIitg7WhHwx7TtG5sD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1448 4948 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d.exe"C:\Users\Admin\AppData\Local\Temp\a769137f38445962b2d7c7e6b979227378d2218839ed031ed7b57d66e25bce5d.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 4642⤵
- Program crash
PID:1448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4948 -ip 49481⤵PID:4796