Analysis
-
max time kernel
178s -
max time network
220s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 13:09
Static task
static1
Behavioral task
behavioral1
Sample
85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0.exe
Resource
win10v2004-20221111-en
General
-
Target
85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0.exe
-
Size
167KB
-
MD5
0dca9e018f54fb3e5f4d61495f4366db
-
SHA1
4d5fa134c5f416cf12abcfc9df467b6668f8fb55
-
SHA256
85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0
-
SHA512
ab6428ea280417605b389c6f94dddf16acb2f32089ab13adeefab2bc28e79e5702b076acd12010e0d4a5f30f1d3568309a2c56c6a2197c30b1d8d926761c8469
-
SSDEEP
3072:tYNQKPWDyYRefVJltZrpRl1P3bwl6PiMpPbLt5Pk4IlhcqzV2i:eNSDyYRO1thppw8PTD5PkLcqQi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4976 3052 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0.exe"C:\Users\Admin\AppData\Local\Temp\85318db334eab57f346c8d5af8d6e562904a16d2480a1e407b400a647de500c0.exe"1⤵PID:3052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3052 -s 4962⤵
- Program crash
PID:4976
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3052 -ip 30521⤵PID:4992