Analysis
- max time kernel
173s - max time network
188s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
06/12/2022, 06:16
Static task
static1
Behavioral task
behavioral1
Sample
b1aaf46b9ad59cce96b50b01a7b57a83.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b1aaf46b9ad59cce96b50b01a7b57a83.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target b1aaf46b9ad59cce96b50b01a7b57a83.exe
- Size 1.3MB
- Sample221206-g1f9vaed4x
- SHA256 bacdddfabf0476948f55a43f5bda407afa2f1cd4884e973a1722e3f674cc2a94
- MD5 b1aaf46b9ad59cce96b50b01a7b57a83
- SHA1 88e096acd8b176844b904cd3de8bd7a568c1513b
- SHA512 ef6afd3fd040e045832f81490a50a941db2444a3aeaf75ceec1ca61fefcbfd5af0956a7cf5bd4e3cb13bf0019ffd7232aecb993601b1954d40167b114be65594
- SSDEEP 24576:F2k+mpoFYW3BDVgiFxRfgvBrS7zui/EzQgzeGm490OlP0lldTRLlZV9N/:Ik+eRW3BDVgGxdGk7KnzQ/eplmlZRLlv
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4644 3932 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1aaf46b9ad59cce96b50b01a7b57a83.exe"C:\Users\Admin\AppData\Local\Temp\b1aaf46b9ad59cce96b50b01a7b57a83.exe"1⤵PID:3932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3932 -s 2722⤵
- Program crash
PID:4644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3932 -ip 39321⤵PID:1468