Analysis
-
max time kernel
135s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2023, 04:02
Static task
static1
Behavioral task
behavioral1
Sample
2023-04-15_71adcadd82ebbe381e81ae47102068e1_destroyer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-04-15_71adcadd82ebbe381e81ae47102068e1_destroyer.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-04-15_71adcadd82ebbe381e81ae47102068e1_destroyer.exe
-
Size
16KB
-
MD5
71adcadd82ebbe381e81ae47102068e1
-
SHA1
53c1b853ec4fc705ea62cc6beb77e163b18a0c3b
-
SHA256
6c98f28abc5043c342d083416d689509d7a28b8158596087c61de439ea8af7e7
-
SHA512
53b768147e691cf53c19b075a2272a4997a208c249af8b6811539415103bad8ae9b91c442789df570876a566fa583c06de8067172e8ea2878754bd3af40ff144
-
SSDEEP
192:E4qTU6kj6QgwqPRmpsAuGtrIHV2sIkgdl9kqoO1/LzecJE1eUb+ra9KdSW9C5bWa:/ykpc12TkMbkq7HecJsl9NW9C5bWa
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2432 1000 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-04-15_71adcadd82ebbe381e81ae47102068e1_destroyer.exe"C:\Users\Admin\AppData\Local\Temp\2023-04-15_71adcadd82ebbe381e81ae47102068e1_destroyer.exe"1⤵PID:1000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1000 -s 3922⤵
- Program crash
PID:2432
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1000 -ip 10001⤵PID:4244