Analysis
-
max time kernel
84s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
27/08/2023, 14:10
Static task
static1
Behavioral task
behavioral1
Sample
320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f.exe
Resource
win10v2004-20230703-en
General
-
Target
320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f.exe
-
Size
30KB
-
MD5
478d324fe348744d1a8ea5701c176b20
-
SHA1
fdd14bce50fc65a3587b27f9684115c92c2fb6aa
-
SHA256
320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f
-
SHA512
cc9574c163f25598911d140b7d6a62055a9e4b6996715971af66af5fbace24883f76f8302c58518d3c895e22e149f4c1cadf9b834010918f94513b5c14064ce7
-
SSDEEP
768:EmWWZOMfhSiFEaLUyla7Rs5P9jIG5P9jINM5P0jIy:EZm5PNIG5PNIq5P6Iy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2216 4280 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f.exe"C:\Users\Admin\AppData\Local\Temp\320ea1fff0fec448b746d84560de75c0acad1ca356cf2412fcd4096bacfaa29f.exe"1⤵PID:4280
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 10482⤵
- Program crash
PID:2216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4280 -ip 42801⤵PID:4052