Analysis
-
max time kernel
147s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 14:59
Static task
static1
Behavioral task
behavioral1
Sample
3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981.exe
Resource
win10v2004-20220812-en
General
-
Target
3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981.exe
-
Size
232KB
-
MD5
24e64392c3d1224a116f832f50252aba
-
SHA1
446326811a67edfc05f639e1da446350803e880c
-
SHA256
3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981
-
SHA512
87c1766490e94a5313e72f3d7a958ff3b3b063006c93eb34e082c6122cdaf2a72be95a1c40865fedb3c8c4f5a888c9a267141b69b09b997cfb45e61431ec70b1
-
SSDEEP
6144:fMlTd7JE4vC+wiyHy3ZIpdWa3+rUPX495IRFGRw8:cEoCpHe2dWa3+rUPXoyRFGm8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5092 964 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981.exe"C:\Users\Admin\AppData\Local\Temp\3e6c566d1e5e8ff0eb308e5569a96d9c4fa146df73a4bde7efc9a382bd3ce981.exe"1⤵PID:964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 964 -s 3522⤵
- Program crash
PID:5092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 964 -ip 9641⤵PID:3716