Analysis
-
max time kernel
160s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 01:23
Static task
static1
Behavioral task
behavioral1
Sample
f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33.exe
Resource
win10v2004-20220812-en
General
-
Target
f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33.exe
-
Size
69KB
-
MD5
bc3812883dc8c0dc2e55f8a7aa6fe782
-
SHA1
cb61c72b438b5f4566c474a262518892521068cb
-
SHA256
f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33
-
SHA512
fafad395e94c0d647b00613dc91ddcdfd86ad2d0aa957f0c760330e02eecceb5367b34c4a4e77aef767bd6a059757c1cd83495f50c08c5219a8185ee7ae86cc0
-
SSDEEP
1536:Fq3ZufbLDnb+Qnu+LKaLrEStwqjWKNaXEl4He2C:s3ZufbnnbdLKWrzjvNaXc2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2132 1076 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33.exe"C:\Users\Admin\AppData\Local\Temp\f1879599f1fde03fa1f1db46364c2d0ff67e79507094f36b413790fe72159e33.exe"1⤵PID:1076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 3842⤵
- Program crash
PID:2132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1076 -ip 10761⤵PID:2164