Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 00:13
Static task
static1
Behavioral task
behavioral1
Sample
c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7.exe
Resource
win10v2004-20220812-en
General
-
Target
c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7.exe
-
Size
24KB
-
MD5
df4afaef6da10f35e90030278abaa43e
-
SHA1
696cd504e7ffebf1291ad1a52a0ac95b7c67f963
-
SHA256
c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7
-
SHA512
8897e5693017911d16b13d9563e8142fcf9bf3d5d3a7cf70e0242e5dd09ac5a89ac694f0eba5d7c43ec7cbf0f877b9724b7ddbda75018fb498569b56da577893
-
SSDEEP
384:ztVpn1XCt1QMMMMMMMMMMMN88888Qbuagq0To5h+SH:V1y1QMMMMMMMMMMMN88888QiFq0ohB
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4328 2620 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7.exe"C:\Users\Admin\AppData\Local\Temp\c5581fa6832789ccbcf614ea039d61cdd6cf59bb8a840ed0f662fc53c0b270b7.exe"1⤵PID:2620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2620 -s 2722⤵
- Program crash
PID:4328
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2620 -ip 26201⤵PID:4724