Analysis
-
max time kernel
139s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
04/09/2023, 13:57
Static task
static1
Behavioral task
behavioral1
Sample
6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173.exe
Resource
win10v2004-20230831-en
General
-
Target
6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173.exe
-
Size
864KB
-
MD5
a61e87dd20f09f2c7e32c4dc553024ac
-
SHA1
ddb41597a43bfcc2948104b425525616d3e09d86
-
SHA256
6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173
-
SHA512
8f4817463dfe133958fcb4a3b807b307c563d5872f4ad7617a50a6eee4387f3d5fa1b5d69255e47e90833b4c25a73e6e42420ab70223ff3b89fd255b727dbb89
-
SSDEEP
24576:6vbiuUV/XUT5GDVbDm4DsdE9laIg6yjsKbr+Fk6xcJ41:yOBMGpbK4DqE9b9SH+Fnx/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 656 3928 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173.exe"C:\Users\Admin\AppData\Local\Temp\6c232b48ebbb3b5960cc36e12a11e6d5f6afc0ce3b6c6ae12bfc245ce80be173.exe"1⤵PID:3928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3928 -s 4162⤵
- Program crash
PID:656
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3928 -ip 39281⤵PID:8