Analysis
-
max time kernel
146s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2022 14:37
Static task
static1
Behavioral task
behavioral1
Sample
ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40.exe
Resource
win10v2004-20220812-en
General
-
Target
ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40.exe
-
Size
451KB
-
MD5
68240a04f8a98c3d08ae6a1878148258
-
SHA1
5de9e3400f000f30c720bf885a9782c676477e5a
-
SHA256
ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40
-
SHA512
73e46c001a14a66caf3de3ab0685dd4e34bf5dbf039a115f67d344fb564d66c4c9685c8676a7674334f6b32aba69999be19c4c83d02fe618b0fe293d5c0a608d
-
SSDEEP
12288:DW1Ry2PUtFQyerhXesb8BmMWNc9fqUEK+iuzhbsbNU8aS5kX:DW1ISUtayGAsbMoiJSK+FINU7iO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1484 4468 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40.exe"C:\Users\Admin\AppData\Local\Temp\ba964b6a5815437052bd34317ed1164c4928c99c8a2fedf74ab597e40edabb40.exe"1⤵PID:4468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4468 -s 4202⤵
- Program crash
PID:1484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4468 -ip 44681⤵PID:4320