Analysis
-
max time kernel
90s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2023 07:02
Static task
static1
Behavioral task
behavioral1
Sample
b6ac0a05b018162025f56114d17ae19eca492b4b.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b6ac0a05b018162025f56114d17ae19eca492b4b.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b6ac0a05b018162025f56114d17ae19eca492b4b.exe
-
Size
6KB
-
MD5
7d9306cf18ad0ff4b0bd8b4c90e06e86
-
SHA1
b6ac0a05b018162025f56114d17ae19eca492b4b
-
SHA256
6f00dc0ac2bdedfb0c221dbdb65827752ca100e7df9c8067ba4984d1ad2e0909
-
SHA512
8ec2953450489251991ee406be8314947f1994605b3ba6c3d2faa9f6f0131c8da4948350c99bc51cfcaaec92f6539ca8942ed528de52e2e6396e19bcccc5beb4
-
SSDEEP
192:PtIWtdi7Ix9VL2JV5JUv9hxllGnCKOJ3+fEyXwC74:PvtTrV2Uv9hxGZOd+f1Xa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 804 4032 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6ac0a05b018162025f56114d17ae19eca492b4b.exe"C:\Users\Admin\AppData\Local\Temp\b6ac0a05b018162025f56114d17ae19eca492b4b.exe"1⤵PID:4032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 2282⤵
- Program crash
PID:804
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4032 -ip 40321⤵PID:2264