Analysis
-
max time kernel
132s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
18/09/2022, 23:47
Static task
static1
Behavioral task
behavioral1
Sample
7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299.exe
Resource
win10v2004-20220901-en
General
-
Target
7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299.exe
-
Size
305KB
-
MD5
94f8469d844914f4351b7e3b7a8141f2
-
SHA1
3591585adf2712941c4f21dec2ed178f7cdfb1db
-
SHA256
7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299
-
SHA512
2b4812d1fa6175f796790ac863be0bedd6960a298b1b0dafe752922c40702fc29c5ac5f482c936ed4569276ba1c4a58aed6917009c2585f561d066eea1d4339f
-
SSDEEP
6144:hHcbBx/WhCy7lE/WZa+VEKt0qtrGu3OSDQcEkkcrBUHC7urn9SW4ROo:h8B4hkWZakRt0qUYBL52EuZSnRZ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3860 2356 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299.exe"C:\Users\Admin\AppData\Local\Temp\7af1ee1e4e98046a68450e777c4750e31321fcc58cb0456b70968d97503f6299.exe"1⤵PID:2356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2356 -s 2842⤵
- Program crash
PID:3860
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2356 -ip 23561⤵PID:1028