Analysis
-
max time kernel
131s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 14:14
Static task
static1
Behavioral task
behavioral1
Sample
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe
Resource
win10v2004-20220812-en
General
-
Target
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe
-
Size
38KB
-
MD5
5c0d1cc5a7033e98a7993f2c80b12d09
-
SHA1
defcc91dbcb74856873e725494c1f64b538fa4ac
-
SHA256
bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271
-
SHA512
f87adfc26883bc420e041527d18f0129433ad2aa1648e76b5e4b1deb60c28f70da9135d4ce1e40dfa312e51aab0a98ef0c5dceeaa64251b2490234b2b211a42d
-
SSDEEP
768:88L8LPJ868R878C888Q8E8m8E8d7/LNDyYgxJHlyf5RPEsw3EbHpsva5wRwUV5n:8bTJzqIfhbp1pG7/LpgxJFO5v8qqRwy9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4056 3320 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe"C:\Users\Admin\AppData\Local\Temp\bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe"1⤵PID:3320
-
\??\c:\users\admin\appdata\local\temp\bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe"c:\users\admin\appdata\local\temp\bc8e5c04e3b6c2933c055e7a3fc1bc312fbade78dc210b782195af1c6df64271.exe"2⤵PID:4212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3320 -s 2962⤵
- Program crash
PID:4056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3320 -ip 33201⤵PID:1928