Analysis
-
max time kernel
169s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 06:25
Static task
static1
Behavioral task
behavioral1
Sample
c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46.exe
Resource
win10v2004-20221111-en
General
-
Target
c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46.exe
-
Size
109KB
-
MD5
8865b1e572c0276b6f659808a225db8e
-
SHA1
dad0030c47e17a2b915c712746c216b3bd6efda2
-
SHA256
c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46
-
SHA512
ef25b5a62c9e5edb86dcde00ee5d456b384c9a0ea9ddef58fe7eee614e407b0f88b0944cfabcdef08a572688e3fc5f1f3dcf586fbf73eff33f1bc24663b5e3b9
-
SSDEEP
3072:CYhix86fzQFCixL3f1fKpEZqObx4J2vNbGfvGnd3gW5ZM4/u:CQm8yzQQitfhKqZbNdndPZMT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1128 4392 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46.exe"C:\Users\Admin\AppData\Local\Temp\c5b9087e0e0886f8aa25bf5a4f4d1ea0ea8b2d1bc447bdabc97acf82b2725e46.exe"1⤵PID:4392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 2522⤵
- Program crash
PID:1128
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4392 -ip 43921⤵PID:4632