Analysis
-
max time kernel
63s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2022 17:15
Static task
static1
Behavioral task
behavioral1
Sample
b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6.exe
Resource
win10v2004-20221111-en
General
-
Target
b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6.exe
-
Size
984KB
-
MD5
5cadf883b887364f4e3cef30d641f956
-
SHA1
ac5f02e0a6f751d917db661585d787e116378c00
-
SHA256
b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6
-
SHA512
ac804e12206f92e578663b2fba0a6a8c3f447df51cef89c5bcb33cecf881db85faadf6464188f8c8746b9199d31e1e88a89504a89258e64fa9065e944a0a1cf1
-
SSDEEP
12288:8pmOmg1k2bfrP437QzH/A6A40lG77NzknuGyimxO:Wmt2bfrP437QzH/A6A7E7dVPimxO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1164 2072 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6.exe"C:\Users\Admin\AppData\Local\Temp\b54412ba7c76879a83762b3a18f600785a241167712b0bda582d65f94e67f6a6.exe"1⤵PID:2072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 2362⤵
- Program crash
PID:1164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2072 -ip 20721⤵PID:3208