Analysis
-
max time kernel
96s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
24/04/2023, 05:47
Static task
static1
Behavioral task
behavioral1
Sample
a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3.exe
Resource
win10v2004-20230220-en
General
-
Target
a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3.exe
-
Size
3.7MB
-
MD5
03afc140f72c554dca999d64fb39d6a1
-
SHA1
a5d5a37781117a50f2e70c49b9b669dda1ddbdef
-
SHA256
a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3
-
SHA512
9840d9b1e56ed44b3a4d625547e5d4ca4a0f16962eef2d94f6ea96c5f45d5103745bf93fa2f35894dc14e45bbfcbe9eff0bf22909925df583e8854cd4322ad8f
-
SSDEEP
98304:hHgdCuovILQqMMMMMMeLm99iL5yTFCM7yWrTue3Di:GdCVvILQvLmD6kTFCM7yWrhTi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 456 4680 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3.exe"C:\Users\Admin\AppData\Local\Temp\a03f07e4b1f672885ed3ac6589f7f876e0facb184d9dc22d56ff9e8370fcd8e3.exe"1⤵PID:4680
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4680 -s 7802⤵
- Program crash
PID:456
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4680 -ip 46801⤵PID:4564