Analysis
-
max time kernel
177s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2022 02:24
Static task
static1
Behavioral task
behavioral1
Sample
d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe
Resource
win10v2004-20221111-en
General
-
Target
d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe
-
Size
76KB
-
MD5
01833ef7c894d9502c3bcedfe6d370c4
-
SHA1
dff3fb9c7b2b82e49a3956ee2949ffa001cfb360
-
SHA256
d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617
-
SHA512
31a8b5ee4095332bce204a2bca480a89251ce99af56b2350e7c03eb0ac03bbcaa94da2f9cbdbb1327f3ae6d3d7d054378e9661d6f6a555c5d84460bac9512cbf
-
SSDEEP
1536:68MRs4vlK4t/WFTIv8TCK7jFH04O9mmQ4fOAV/tFhTocC:68SEAWaKXF+9fO6/BocC
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3748 2648 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe"C:\Users\Admin\AppData\Local\Temp\d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe"1⤵PID:2648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 3402⤵
- Program crash
PID:3748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2648 -ip 26481⤵PID:4056