Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15-08-2023 11:13
Static task
static1
Behavioral task
behavioral1
Sample
8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea.exe
Resource
win10v2004-20230703-en
General
-
Target
8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea.exe
-
Size
4.5MB
-
MD5
ac09d0404b0293e2224c768f9ff95df3
-
SHA1
218d7fecea3590e23d611d29cf35f157fee8a992
-
SHA256
8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea
-
SHA512
b8815f44ae0b4520823ac6b49473fc1158a69edf69cee45c2f1cb76165cb014932624fe5b33bfbe64f90145c3d3fe98a8b3bc5cbc33fa7a035cf3eb378e02b4f
-
SSDEEP
24576:3cr3wNHEHLoJA//1ifzCc4aZub3c4j2lHr5bgqTJZHjYT:Mq4tc4aVIT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4868 2036 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea.exe"C:\Users\Admin\AppData\Local\Temp\8263eb67848b99bc0c041c2c3cf42125550d64a80e778091912bf6385a02b8ea.exe"1⤵PID:2036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 2322⤵
- Program crash
PID:4868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2036 -ip 20361⤵PID:4172