Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 02:42
Static task
static1
Behavioral task
behavioral1
Sample
b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4.exe
Resource
win10v2004-20220901-en
General
-
Target
b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4.exe
-
Size
804KB
-
MD5
0f65a1dc01009e772b18cb4af2120eb3
-
SHA1
7894cd30e51e4f71b9501f686891d6fb2bb06257
-
SHA256
b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4
-
SHA512
0af7707411899c82131ce21e7418a5df6da42501ef03717e6c3f25e21a21a26871e5d52d32be71f248c5ce171f2130379e1a9107ad05e05c729ae879f0857d98
-
SSDEEP
12288:dM6FYg0XOxDmdbeho1+ZCdjahVip0RakSXPFYgjmZTNT0gxK:Jmg3Mpm/CdjahVMkNquh0p
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2412 4180 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4.exe"C:\Users\Admin\AppData\Local\Temp\b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4.exe"1⤵PID:4180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 2642⤵
- Program crash
PID:2412
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4180 -ip 41801⤵PID:4760