Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 22:47
Static task
static1
Behavioral task
behavioral1
Sample
97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41.exe
Resource
win10v2004-20220901-en
General
-
Target
97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41.exe
-
Size
97KB
-
MD5
411b6c0d10e65e29635a7ecbf1a6b8b4
-
SHA1
a4c5fedf51b9a84d621d52820958c0a0932c5270
-
SHA256
97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41
-
SHA512
72f808f80d948d7212cfd9dfb76857387ecd141632c3dfee821ad86a8df135fda7d1eecd14917bbdb89d9af65c849bc87da6601e6342c9140843ad6e27a738f0
-
SSDEEP
1536:xRZZpp48Zd0lo+4EMMyO3OexOSEowTwBjzvcmJoxDWqfqNII2Ca2B:bZSlI/HUOjSiToj7CEqfqg2B
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4440 5004 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41.exe"C:\Users\Admin\AppData\Local\Temp\97fe53f1d66a5973a9850de76056bee5bd55d063ef614e0f691dba1b995f3f41.exe"1⤵PID:5004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 4802⤵
- Program crash
PID:4440
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5004 -ip 50041⤵PID:4892