Analysis
-
max time kernel
172s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 05:29
Static task
static1
Behavioral task
behavioral1
Sample
c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22.exe
Resource
win10v2004-20220812-en
General
-
Target
c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22.exe
-
Size
146KB
-
MD5
cea464b2c78fbe840e1a2b6eed007b50
-
SHA1
100bc91b7f0ff5e5dfea2a6f9c4cfd3221be16bb
-
SHA256
c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22
-
SHA512
7c3b071fafc702ba4b67a16b192042ae010249f3ee9a022caccac2330579510bf3906c2026f8bb518feb41a4425956e178e0452d6dcb10cb7155aa8bda9abb9d
-
SSDEEP
3072:EBQCtsTXd3e0IT6npK6sWWuzV7FWpcSz+egU2FtaL+W:ECCmXd3140wpVp52F0LV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1792 4644 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22.exe"C:\Users\Admin\AppData\Local\Temp\c519144fec398652fbda410c426d05fa712821c2e263c9e7ae5c23b2f3b15e22.exe"1⤵PID:4644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4644 -s 3562⤵
- Program crash
PID:1792
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4644 -ip 46441⤵PID:1048