Analysis
-
max time kernel
203s -
max time network
213s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 10:02
Static task
static1
Behavioral task
behavioral1
Sample
c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5.exe
Resource
win7-20221111-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5.exe
-
Size
875KB
-
MD5
1d300b42acc00f14506e3bf709dd9a6c
-
SHA1
48be4d2b37d461a6c05640626e427046d97393c9
-
SHA256
c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5
-
SHA512
73ba9aee764d61aa385cfcb1cc5468fa481d534147a76af0642112ffa823bc40f44605407764962fc654baa1865065f1faf9b2e0462303782e2380bd00b6bc98
-
SSDEEP
24576:QyETPiLKHOuAyNotn4Jtre0SgkeAzytQC:QyOoKHOuAyNYnAmOGaQC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3952 5008 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5.exe"C:\Users\Admin\AppData\Local\Temp\c7afec2b1e8204b71e7ebae7b8752e11d35f85c54d6992c558e5083a00b4cdf5.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 5442⤵
- Program crash
PID:3952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5008 -ip 50081⤵PID:3076