Analysis
-
max time kernel
90s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 07:09
Static task
static1
Behavioral task
behavioral1
Sample
725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c.exe
Resource
win10v2004-20220901-en
General
-
Target
725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c.exe
-
Size
390KB
-
MD5
478fdb782c64c14a4fe86a84e24245a7
-
SHA1
02acdce819a58ced791ab4fe7e312fd641a24073
-
SHA256
725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c
-
SHA512
931ef008628c0e913806bd58841b8d5579dba6774aa9da67a7c4e22e5b428aea326b312a3c6047b848ca51c75583050e3d1d801bd6fda86791148bd101d0304c
-
SSDEEP
6144:11h0avhWATVALsb7ftm1+RvvrDjPm0B2TPlAjUZd4+g9o+:1zYNLWJm16PDCPl86
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3764 1632 WerFault.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c.exe"C:\Users\Admin\AppData\Local\Temp\725d83b93ef8b32bb318a1650a685f1525bb6ece3e625306f876723b25764c6c.exe"1⤵PID:1632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1632 -s 7642⤵
- Program crash
PID:3764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1632 -ip 16321⤵PID:4412