Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2023, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe
Resource
win10v2004-20230703-en
General
-
Target
b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe
-
Size
37KB
-
MD5
daac4034f78c8fd2b6e913cf9b0131c2
-
SHA1
8604279c5e7735fa0416fd43d52231824f5fb451
-
SHA256
b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494
-
SHA512
1ab77dc1d5a2788fa6bdf3f78957a4b65f2a49ed8baf539c7f845ea0543122286dc621672eb848ba4573d36ad93cf47a9aaaf074d23555e9fb865ad9004520fa
-
SSDEEP
768:9/4jXS1/UfKXgr9JX4h79KzNu7yVmiS805jvom:9sXS1sfKXgrvXoZ97aPSf5bF
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4876 2036 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe"C:\Users\Admin\AppData\Local\Temp\b79563df61a856933d52343ac0f97f5a201e86ce2e81d6cc82f574b30f46d494.exe"1⤵PID:2036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 8362⤵
- Program crash
PID:4876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2036 -ip 20361⤵PID:2740