Analysis
-
max time kernel
97s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/03/2023, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f.exe
Resource
win10v2004-20230221-en
General
-
Target
fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f.exe
-
Size
673KB
-
MD5
d888342a1b0e7771bd609afc47541c53
-
SHA1
23aeb9d0e72aff63605657a0650aab2bdbd7a604
-
SHA256
fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f
-
SHA512
1ba1d89c2ae68bab553e8d34de835842b314e764a8735ddb8d5919b0ad98e0cf7485aa677ea6fc6f755cc493a6930ea705cb806e75b79788509a12899a138fa7
-
SSDEEP
12288:3hHlj/Og5G/akuUcAvKUSWEjXdMXapWEIuy/JXF24c2HywyH:RH5/O7SqcXW/1Oy/JXFjcyh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2392 2876 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f.exe"C:\Users\Admin\AppData\Local\Temp\fd977cdb6d2b8ceceb43c0cb5781b5f7691fbf9f3f1d07c28d3845d04fe4a14f.exe"1⤵PID:2876
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2876 -s 2162⤵
- Program crash
PID:2392
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2876 -ip 28761⤵PID:1988