Analysis
-
max time kernel
112s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2023, 02:34
Static task
static1
Behavioral task
behavioral1
Sample
c6bd7901bdff90b30cde4591158cb78f02d5d307.exe
Resource
win7-20220812-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
c6bd7901bdff90b30cde4591158cb78f02d5d307.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
c6bd7901bdff90b30cde4591158cb78f02d5d307.exe
-
Size
338KB
-
MD5
e986cb70b047185a3cd4c89691db329c
-
SHA1
c6bd7901bdff90b30cde4591158cb78f02d5d307
-
SHA256
c42249622ede08e4b7c9195631a5fa6f2f61306b1f96167910ffb92861f3367a
-
SHA512
a70a4fdc362e56b58642da421a7670b7726d87ad9e494138a2402d23eb32da7c9795e365f0b7758cff9f32377bf0b63caa40edf7e178ef1a4399037241a10b71
-
SSDEEP
6144:cy2Gs5BBVOCAKPiAPCbqirQflRabwfqATIaFo2eygNVtlWBuxNXonMpDKFdrEU:cnGG5OCJiiEqicfGcfN9penE03XonkDE
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3756 1180 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6bd7901bdff90b30cde4591158cb78f02d5d307.exe"C:\Users\Admin\AppData\Local\Temp\c6bd7901bdff90b30cde4591158cb78f02d5d307.exe"1⤵PID:1180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1180 -s 3682⤵
- Program crash
PID:3756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1180 -ip 11801⤵PID:4440