Analysis
-
max time kernel
91s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1.exe
Resource
win10v2004-20220901-en
General
-
Target
b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1.exe
-
Size
412KB
-
MD5
75ae7cf149def68b456691fc1a305373
-
SHA1
7459fa67569545c16c431a8e491ab2d1776791cf
-
SHA256
b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1
-
SHA512
379daf2f3d738ebcb7371cf12551454667238af0535922b0f26e0d2b18cbe6fedba486a5c549513b002acdefa703ddfc6218aac12b6b1241600a8174f24d4e17
-
SSDEEP
6144:rxq9Ut5vPbbJQOPwSUdSX4nuftE1uJW3BT6+E/S9i7ygiYftc5pH43C1ry:rxEE5uvdSoIt00WR9E647ygiS8u8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 612 4344 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1.exe"C:\Users\Admin\AppData\Local\Temp\b50f1e8a9dcb7669218560c8bc03e82358794278d259bd47fe61a14ec21a92f1.exe"1⤵PID:4344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 5602⤵
- Program crash
PID:612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4344 -ip 43441⤵PID:5008