Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 18:15
Static task
static1
Behavioral task
behavioral1
Sample
ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0.exe
Resource
win10v2004-20220812-en
General
-
Target
ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0.exe
-
Size
330KB
-
MD5
f4a629a920c10640d6153f3832237e2c
-
SHA1
c65f31eb0f528cb42fdcd96ac09384c44c855a59
-
SHA256
ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0
-
SHA512
88450cd41eb768a8c59991e1dd61c737ff25922dbd3e54da4ac91d872ad2d8808e8194f65e2c3e757100e19f95b4b2f710573f5fc94f0e58d816b5eeaa62ae7f
-
SSDEEP
6144:/tE/7FUgliyUXe2ZsD9eBVtQRlc12iVkIFzq9TLSDoC3FHvKHMEnb:/aDFviym920jcc1f9W9XS335vHS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4896 1236 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0.exe"C:\Users\Admin\AppData\Local\Temp\ca829b6cbdab398e68548a6a23eebb874684f73bc879ecdf24d12435f40731d0.exe"1⤵PID:1236
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1236 -s 2802⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1236 -ip 12361⤵PID:4176