Analysis
-
max time kernel
149s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 08:36
Static task
static1
Behavioral task
behavioral1
Sample
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe
Resource
win10v2004-20220812-en
General
-
Target
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe
-
Size
201KB
-
MD5
c54db77db9e433aff6eadf76fb879e2e
-
SHA1
b2d75d8861e4b1dec2c7eb2130e333e8ae72b399
-
SHA256
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da
-
SHA512
9fa881da3dd853609cd2edbda81236e8fcc1314d0fb23cb1708c8b3dfbf7ccabe3d15a6fafed9de1a17687695118142ddbd931547294c24dffc1f3142f1142a4
-
SSDEEP
3072:7VXHWHp4vhTOc+UAXnDi3dlzQm/9wXbGUN2wiooEtLqPors/DlZ5AEuKxUk:VHWHC6h1XnKnzbqbGw2wiovprmVTxb
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4056 3988 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe"C:\Users\Admin\AppData\Local\Temp\a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe"1⤵PID:3988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3988 -s 3762⤵
- Program crash
PID:4056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3988 -ip 39881⤵PID:4784