Analysis
-
max time kernel
187s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 11:58
Static task
static1
Behavioral task
behavioral1
Sample
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe
Resource
win10v2004-20221111-en
General
-
Target
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe
-
Size
446KB
-
MD5
4626e8f77a70145bcb81bdc189ea95f8
-
SHA1
1616e9cdaf290ad1bd5293e4af8d48ec508cfab8
-
SHA256
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61
-
SHA512
c26d6b1e39065f9523bef4f376fb74cf9dd2b14a4ac83df057dc65c3c67a28d3ff93231cde3e67305031a217dc28bec192297c886c4d127e88956feadd42babc
-
SSDEEP
6144:IO2lzlVlRV8uTRC+sXhTgbAUxQygAFvWNlBSoojQKjW/T9IbWduJRTQ7Rzb88day:b6rT8Xh+AGQQkbB/JUW/eVERzwHy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1536 2928 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe"C:\Users\Admin\AppData\Local\Temp\96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe"1⤵PID:2928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2928 -s 2842⤵
- Program crash
PID:1536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2928 -ip 29281⤵PID:1436