Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 14:12
Static task
static1
Behavioral task
behavioral1
Sample
b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8.exe
Resource
win10v2004-20220901-en
General
-
Target
b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8.exe
-
Size
300KB
-
MD5
60c106221a7de5380d4b31da277f63c8
-
SHA1
bcee6cdeca94e19af3f2647e271384096e1308be
-
SHA256
b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8
-
SHA512
0524ac696d4623893d65f46e010104d498ff5e74aac4ccc435fbf3c4e2dcbd772995445093aa44c236009df2a6aeb78c632e37f53e15b50e1c1aa3260bedc3f3
-
SSDEEP
6144:3N7RZ9vt5QY8iJYeDZogYyDjGZ/t62pCcEMboZV4qxGINwzNJI7sPeHtqBFtbDzL:9P9vt5QiJ71g1JZEMb69XWJI7ZeDzeH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4452 4152 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8.exe"C:\Users\Admin\AppData\Local\Temp\b44317121d4478c0502a43b450239389ef0f5da17eca08cd6f0dfee74cdfd9d8.exe"1⤵PID:4152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 3002⤵
- Program crash
PID:4452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4152 -ip 41521⤵PID:4924