Analysis
-
max time kernel
147s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 05:17
Static task
static1
Behavioral task
behavioral1
Sample
c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133.exe
Resource
win10v2004-20220812-en
General
-
Target
c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133.exe
-
Size
414KB
-
MD5
297a32f97f09491c6ee85dc2d8dcbfd7
-
SHA1
2e7372878238bdf6621b7a3cda2e14a630d14208
-
SHA256
c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133
-
SHA512
ca0f1e158d0d6664136c32f4373a2b08f50e50f822adcc0a07a86964de392bc6de29a0a66f5a37f71fa9babe3045fb083ab4db81f5975d272db7d277ec81cf45
-
SSDEEP
6144:Upt2r4BmxtJA9/XGuCKVBzakE7G/XAxb5vSr31RYDrLhCwV:pr40eXPJVBz+1xbh831RYDrB
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1556 2060 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133.exe"C:\Users\Admin\AppData\Local\Temp\c232599ed8dcc5be23a34500cd4d4131ca811fd874bc467c31b530bd7ba38133.exe"1⤵PID:2060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 5402⤵
- Program crash
PID:1556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2060 -ip 20601⤵PID:380