Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
10-01-2023 02:19
Static task
static1
Behavioral task
behavioral1
Sample
ad84d83e881b0f1811d2b203acfa50a5bcaed780.exe
Resource
win7-20220812-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ad84d83e881b0f1811d2b203acfa50a5bcaed780.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ad84d83e881b0f1811d2b203acfa50a5bcaed780.exe
-
Size
408KB
-
MD5
a5e1e6d7dff4e5c3fd4a946e79f351a6
-
SHA1
ad84d83e881b0f1811d2b203acfa50a5bcaed780
-
SHA256
588d8720e71dcb9208decba81a3e1f4ed76c12025965ea4562d123e849ebf99a
-
SHA512
fdf88f6861aa0c431de1a0260d8e09c0738726835957f784d25d094979947feb317f3560e01777ce9b660d7c201399a188ddd43888d89b9496f80aadf48d98e3
-
SSDEEP
6144:wIuMZiP895+62p3PdadxO7qfdJl0XGTD18itanG1g8OkCI1mnqGxE4Ed:whVIn0MxOOVJyX6h8itV1ypwmn9xE4I
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1388 5072 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad84d83e881b0f1811d2b203acfa50a5bcaed780.exe"C:\Users\Admin\AppData\Local\Temp\ad84d83e881b0f1811d2b203acfa50a5bcaed780.exe"1⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 5082⤵
- Program crash
PID:1388
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5072 -ip 50721⤵PID:5064