Analysis
-
max time kernel
127s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28-08-2023 18:05
Static task
static1
Behavioral task
behavioral1
Sample
8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe
Resource
win10v2004-20230703-en
General
-
Target
8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe
-
Size
1.8MB
-
MD5
08a7481c0cab5e4964e5c02a2069cd35
-
SHA1
5f89817d7373ce51c87dd61a37261b4a9902884d
-
SHA256
8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3
-
SHA512
a6ec7d0c3d8f97bcc53a56a609d8df8102fe3b65faac0a81f0142f3bf4499e50d442fa454884750c8a7a281c0d1913d8360f749c99fb23e290564b203ae3fdee
-
SSDEEP
24576:6lKmygBrATMXoRnHPWwwMp6aIY4In2VSfAGyuP4SLhSJ1DFe/ZTAnWgMX7LxXJC9:wWG47xIY4u2wfj4SLaReBT/nX7LxXJ
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4108 1532 WerFault.exe 81 3344 1532 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe"C:\Users\Admin\AppData\Local\Temp\8c5a74b614628b6bf7799afadf513adc483943d60fa1002189030afbf42b04d3.exe"1⤵PID:1532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 5722⤵
- Program crash
PID:4108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 6122⤵
- Program crash
PID:3344
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 348 -p 1532 -ip 15321⤵PID:2052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1532 -ip 15321⤵PID:1840