Analysis
-
max time kernel
196s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 00:28
Static task
static1
Behavioral task
behavioral1
Sample
a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37.exe
Resource
win10v2004-20221111-en
General
-
Target
a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37.exe
-
Size
364KB
-
MD5
66ec2bd1e49ac5c294efcfa027ac6c6e
-
SHA1
34a0a75563ce1f1afae965d1fc0e979761ab2ed5
-
SHA256
a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37
-
SHA512
6f94b0af2b4dccb8f526c56c39fccfa10924b25bb1c5c859ccd2e53dac661dda3f3c156c7eaa47b5d1522d989d139cb98e1dc9a39c613a906f49f4149eb26e5d
-
SSDEEP
6144:QbCdhXyzFF7IX0zE9NKFEWNFfK4CS0NwI9j2+fFBFFrkiE:QmdNW7IXxcXNkjN9jZf1Frw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1872 1560 WerFault.exe 20
Processes
-
C:\Users\Admin\AppData\Local\Temp\a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37.exe"C:\Users\Admin\AppData\Local\Temp\a64dd18100136b7f33b1b715bd344022f2b05fc7f7e83e8e7f2372d33ca9fb37.exe"1⤵PID:1560
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1560 -s 4762⤵
- Program crash
PID:1872
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1560 -ip 15601⤵PID:1340