Analysis
-
max time kernel
91s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 03:16
Static task
static1
Behavioral task
behavioral1
Sample
26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf.exe
Resource
win10v2004-20220812-en
General
-
Target
26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf.exe
-
Size
433KB
-
MD5
ef182955c95d1d1422eb5151d6986a4b
-
SHA1
42ef85ce59b9c02867486975df90c19acbe7ba60
-
SHA256
26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf
-
SHA512
841c9f9f51040953599f39c24379d3032da2a20e1009d28011ea8a7168860c081ee53edace4f19e9ffaeacacd981a506cb7f4cb151d0b0e13da92a5920fe5e85
-
SSDEEP
6144:b82p4pFHfzMepymgWPnviP6Koa0nArn20l96tCF2eKNBDRlC8HQQDhy5OwbYmilk:/p4pNfz3ymJnJ8QCFkxCaQTOlR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 4260 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf.exe"C:\Users\Admin\AppData\Local\Temp\26ee402ffeb2cf131f6f2771598958d0f1ab3f4d16bc6528ea3e51021e107fbf.exe"1⤵PID:4260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 1922⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4260 -ip 42601⤵PID:3436