Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
20/12/2022, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1.exe
Resource
win10v2004-20221111-en
General
-
Target
9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1.exe
-
Size
65KB
-
MD5
56ce438e8ebd4d5a7ddbb37e1cac160c
-
SHA1
edd77006e52fa1949cb146b901f303526960ee9b
-
SHA256
9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1
-
SHA512
df2637daff6472bd771fd1bc84a9674fd1d0283d2239f9e4233a5790b7d7428b6614aed3c6edbe89a5e4814fa464fa2333538988365ebec4c19fa9cc73d9dc30
-
SSDEEP
1536:I4Aqxzg31oQ/a0sD07sNhDk+Mumzk6q1rO6zQJ:rNg3JuD6snDk+QGrvQJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1964 4596 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1.exe"C:\Users\Admin\AppData\Local\Temp\9c935c008b6725c112f3ebb56eb22df860809b60d53420ddee3f37fe76230fd1.exe"1⤵PID:4596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4596 -s 5322⤵
- Program crash
PID:1964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4596 -ip 45961⤵PID:4552