Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
26-08-2023 14:40
Static task
static1
Behavioral task
behavioral1
Sample
5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09.exe
Resource
win10v2004-20230703-en
General
-
Target
5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09.exe
-
Size
754KB
-
MD5
eeb7a554818eaaa13ae39f02f54dd35b
-
SHA1
3050ce0aa70ab26e5593552dcaf30e61f92c72e9
-
SHA256
5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09
-
SHA512
672eb52ddb505ed7aac1b4e7f06effce99e236eb97907815c00906050f38ba3e0103eb46e9c6680116ed7b2b52b9470c8d680d706a86f7f484fa2383fd0e0a27
-
SSDEEP
6144:0Er4xHNGMGvlWLwPDvBjmydGcjBE+iufSV59qmHdnseNVGw7zANBESHqXhEnFu2o:0tHNGnvOwAyVdETufSz
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1192 5032 WerFault.exe 80 4284 5032 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09.exe"C:\Users\Admin\AppData\Local\Temp\5b731e3fd4cb11cd82977472252913ab3a93fa779f9c8ad9cd1050f87fb42b09.exe"1⤵PID:5032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5032 -s 4122⤵
- Program crash
PID:1192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5032 -s 4522⤵
- Program crash
PID:4284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5032 -ip 50321⤵PID:3552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 5032 -ip 50321⤵PID:1324