Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 08:43
Static task
static1
Behavioral task
behavioral1
Sample
61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744.exe
Resource
win10v2004-20220812-en
General
-
Target
61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744.exe
-
Size
72KB
-
MD5
d9f622af3dd5c33cd9b487b978013056
-
SHA1
86b17b109d82acadfc28b5479a7f6db339cca7c9
-
SHA256
61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744
-
SHA512
95e6f1174c02ca900a617b2b6134e0ffbb01c591c9fd63c0ab546c85dc21692b50ac71a37831f72e82fd3d5d40cacecc7aefc49ba26d3b325672469e81c20df7
-
SSDEEP
768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4i2L:qfWeK0tgc2VVLpffqHjpp19VxRw6QL2L
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3972 4852 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744.exe"C:\Users\Admin\AppData\Local\Temp\61e44843a5b16fdb6d047188fcfaedd0eee50a37a8500d97fe541adfa81c6744.exe"1⤵PID:4852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4852 -s 4882⤵
- Program crash
PID:3972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4852 -ip 48521⤵PID:4568