Analysis
-
max time kernel
139s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2023 05:51
Static task
static1
Behavioral task
behavioral1
Sample
12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075.exe
Resource
win10v2004-20230703-en
General
-
Target
12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075.exe
-
Size
13.4MB
-
MD5
b81c983aead673ce96643432d25578f3
-
SHA1
3a60f691dae33a5d19854e9125075e0d0a040f5b
-
SHA256
12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075
-
SHA512
8c6c1d639faf967d70a37035bc4029dd050a6bd1b847313797c41c6bf552b27f764cbc0b2713930c1b797fb982dc28142d5ac2dc6ded728821474e8a0ef66641
-
SSDEEP
196608:plzqt33f0rjwhyv6NQKpdqC7MRPOZJINw2pMn5Dum6dD7Dt5LDAFmf5DRBcI5+:2t33f0rkhnn57M8IPe5SDD3PEAy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1232 4988 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075.exe"C:\Users\Admin\AppData\Local\Temp\12575f7847a0f74acf54f32978261440a3268b182ec5dd388d87d075f1b39075.exe"1⤵PID:4988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 6202⤵
- Program crash
PID:1232
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4988 -ip 49881⤵PID:2156