Analysis
-
max time kernel
155s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 23:37
Static task
static1
Behavioral task
behavioral1
Sample
25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1.exe
Resource
win10v2004-20220812-en
General
-
Target
25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1.exe
-
Size
171KB
-
MD5
315bc3d0112c651f552b08ef63187970
-
SHA1
4edc59c833db90bac1c889821b67adb76a8f73b1
-
SHA256
25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1
-
SHA512
aebbe3bdf32db16b0e0e005dd472dadd4c1f3e91f78956ff4105aa4d0758f76a0c26ef0427021735610d2a5e73939873b74caa9a42df7d33bb4c937c84c42516
-
SSDEEP
3072:iulwhu1ltsjMn5dQn9pTdtsDT4YckD3Uk89JOCOvcHLscHLBk:6hu1zsjM5Wn9pTkDTV58TOCOUHLPHLC
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3756 4568 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1.exe"C:\Users\Admin\AppData\Local\Temp\25e46aadecd642fb1204ba12e26de752e9e4d75038f550e1595d945be6d95ad1.exe"1⤵PID:4568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4568 -s 5242⤵
- Program crash
PID:3756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4568 -ip 45681⤵PID:2248