Analysis
-
max time kernel
163s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 12:28
Static task
static1
Behavioral task
behavioral1
Sample
d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d.exe
Resource
win10v2004-20221111-en
General
-
Target
d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d.exe
-
Size
72KB
-
MD5
bde7bc13cc98e158ae789284aa5749c0
-
SHA1
20d8cb18f2915c591b612f03a8566de136d11add
-
SHA256
d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d
-
SHA512
65873c265091204c13a5119d89961e28fe207066a2507389c3e586e1b42db016bbea22c3f921475089f2453ae7dba0a1c15820135b0dcc98ed6abad9bd0977d2
-
SSDEEP
1536:KLjoiGKYsfkVXc0CI930xZ4/ImfhZFozBGRXw3a/U/ECO:KLzGKdfkVsqIZSImfhZF7/UcCO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4820 1248 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d.exe"C:\Users\Admin\AppData\Local\Temp\d7b18a09e9f5b021a931a77b3d411bfd4cb363e51f5d140c97ecc3da598e3c4d.exe"1⤵PID:1248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1248 -s 2242⤵
- Program crash
PID:4820
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1248 -ip 12481⤵PID:1940