Analysis
-
max time kernel
127s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2023, 08:07
Static task
static1
Behavioral task
behavioral1
Sample
571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03.exe
Resource
win10v2004-20230703-en
General
-
Target
571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03.exe
-
Size
848KB
-
MD5
09024f731b60a0ed91bddfc98e3562ec
-
SHA1
2d365f0f1567b0e9aa388da589bf0ea6777d649a
-
SHA256
571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03
-
SHA512
9c4e3f1b1c3a8ff8019b4637c0dab1387458f3e0211e817aca33ea8d4fa77bc9c964cf876dddaeab06cde6eab5779df45cfdf6aec3bed1e32ffffb76fdd1a8da
-
SSDEEP
24576:C1wVEKdE4pHZIivwZ66YrixYqcZV38cTuImmVF1g3o9/vNP:IwVC4p5IioZ66Yryco5IB03a/vNP
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4648 2968 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03.exe"C:\Users\Admin\AppData\Local\Temp\571b1906ad3446df4ab5e35d23eb7bc0e72f467e44121b3a044c0794e7df5b03.exe"1⤵PID:2968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 3442⤵
- Program crash
PID:4648
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2968 -ip 29681⤵PID:2088