Analysis
-
max time kernel
61s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
15-04-2023 19:33
Static task
static1
Behavioral task
behavioral1
Sample
785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934.exe
Resource
win10v2004-20230220-en
General
-
Target
785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934.exe
-
Size
1.2MB
-
MD5
d9cf42bec0c0999de7e98d45856d9050
-
SHA1
873ffe23e7b65f5c405e7255f5aadfc4db58a30c
-
SHA256
785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934
-
SHA512
1cee1a531c8d95911e5a25cb65c0e2694b19daacc5a1032756620b3f107163018e117542af8c6078c16d1b4a0bd9035f8633fc3d446dbb7ed8bf54aa60972cb6
-
SSDEEP
24576:Imq1zmWZzIiEXfIdznBiNghUBsL7hZXuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuq:Imq1RIiFTkNghvVpuuuuuuuuuuuuuuuV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1608 4124 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934.exe"C:\Users\Admin\AppData\Local\Temp\785cb3d306017adbd424f68a5edaef9e647934ce4c452eda6a1b061078a77934.exe"1⤵PID:4124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4124 -s 5162⤵
- Program crash
PID:1608
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4124 -ip 41241⤵PID:4100