Analysis
-
max time kernel
57s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
02/05/2023, 22:11
Static task
static1
Behavioral task
behavioral1
Sample
a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0.exe
Resource
win10v2004-20230220-en
General
-
Target
a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0.exe
-
Size
5.4MB
-
MD5
5bcfe0a3fe831ce8cf21242486fb2557
-
SHA1
595203706b524f6daaa8095e44221bda52cd06aa
-
SHA256
a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0
-
SHA512
7d133a8901cd20dad48af90ebd64156b3fb9d9271243176301ce6abb9c757bab2076a99453f3f36db12b4c3bcda94d925407dd9578b1a2f9df4d04c9d23ced86
-
SSDEEP
98304:UrNepRBlKt1C3FVwrEyflo1TNqRQI3PqSXIGr9EAxIUiAU5SWiZ7f3P7xMIt8KnG:eNerBw7C3FVwYytM2p3PqaIUEA/iAYC8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1304 1228 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0.exe"C:\Users\Admin\AppData\Local\Temp\a5538d8e2b651ff2088e5ecac48c9a050c1256820da22c2abcbf44984e18aab0.exe"1⤵PID:1228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 3962⤵
- Program crash
PID:1304
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1228 -ip 12281⤵PID:556