Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-12-2022 03:22
Static task
static1
Behavioral task
behavioral1
Sample
f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459.exe
Resource
win10v2004-20220812-en
General
-
Target
f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459.exe
-
Size
95KB
-
MD5
4339b116f972e3e218e5c5e0ca41a485
-
SHA1
e367adbc2bb6bd4ab542562f523c613d94652c23
-
SHA256
f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459
-
SHA512
ae154d5cc01e79d6a1a553f1e900380c9b557831d8f3c4e0e6075b68040601bde4e7df1e875df4938e6a6d94f73ddae755bf3922c697e9e13822883b75cf139d
-
SSDEEP
1536:PHim9w52TsEaO+dGSyZvLk23vacS7KeU8D9oizvU5D2XoLPrgN/w0h9LSsT81:MUFarwZw23if7rZoss5DvgN/w0z2j
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4960 4992 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459.exe"C:\Users\Admin\AppData\Local\Temp\f45318e4e830264d82c24bc168a3e8bddc80ee5c04acb779b17ba027d28fc459.exe"1⤵PID:4992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 2242⤵
- Program crash
PID:4960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4992 -ip 49921⤵PID:4900