Analysis
-
max time kernel
143s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2023 08:39
Static task
static1
Behavioral task
behavioral1
Sample
4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5.exe
Resource
win10v2004-20221111-en
General
-
Target
4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5.exe
-
Size
1.0MB
-
MD5
70de5f770fa3084a7ab6b8fea3b1578b
-
SHA1
f1e0395cd5a642216123838aaad9db8ea01f014b
-
SHA256
4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5
-
SHA512
22a0fb77eaa8e016b7a21fe0496e4c0b0bc308e139b9b900a199efd68ebac5ec33fa1b969b62564db7f1511329e63f8565e3f66eaf6036290297ba097d66132b
-
SSDEEP
12288:HZ+2iN1/Sr+pVH8c+9eEtXU1XdsavwPvjWFdrzveQRu3cO8zUoaFaWFf+mDXttaU:M1e+VH80ExETwH+C2uMc5B
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4252 4488 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5.exe"C:\Users\Admin\AppData\Local\Temp\4452b0b5eee281b5a7e1f9b27538798bb78de07ebfdeb16a84dcfd4033a213d5.exe"1⤵PID:4488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 10442⤵
- Program crash
PID:4252
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 4488 -ip 44881⤵PID:664