Analysis
-
max time kernel
185s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 07:45
Static task
static1
Behavioral task
behavioral1
Sample
0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d.exe
Resource
win10v2004-20220812-en
General
-
Target
0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d.exe
-
Size
409KB
-
MD5
a636f40dc7c6aa718ef5af80d432a29b
-
SHA1
2edf6938e5938a42114abba48fd08eb1245c48c0
-
SHA256
0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d
-
SHA512
4db0a38a7ea3ac542e295bd73a8c84577488a9fb493358492aeeb19145d75a1739eccb1dcfae14d64fde0d6605954d2fc3419174359de70a85115c879354aed7
-
SSDEEP
6144:MuZUY7eiLnfnB7pRi8I+SzLqOZ49XCUgNqGyCYUE/1rWDepfYXt+o6YUTLhv:MuZUY7eandid+SNGCUgM7Ck/1r7Es9v
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 996 3480 WerFault.exe 78 4696 3480 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d.exe"C:\Users\Admin\AppData\Local\Temp\0a6457919e8e5b0da530b081122490cba01d785e83ecf75556bab8a4736fa77d.exe"1⤵PID:3480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 5362⤵
- Program crash
PID:996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 5442⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3480 -ip 34801⤵PID:1032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 3480 -ip 34801⤵PID:4724