Analysis
-
max time kernel
133s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 12:26
Static task
static1
Behavioral task
behavioral1
Sample
cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e.exe
Resource
win10v2004-20220812-en
General
-
Target
cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e.exe
-
Size
206KB
-
MD5
7c449a329abe40d0d906c6b0bdba1b31
-
SHA1
5a37e49dae0612b80e4ec9cca5996487bc46d0ee
-
SHA256
cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e
-
SHA512
aaab9f4de5df1ebe3fadda36793b3b1100a1f2315a36405105912ac0795787c79e6432e652444489e133d5e94eeac7f53b670f5ea63688bb776daaaa4f3c0776
-
SSDEEP
6144:pI/9zgWclaAr9sMd+s/t5Ud9VxGFkWhY9A/BU3e:pI/RgWclaApD/t5uuFk9SU3e
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3760 4020 WerFault.exe 52
Processes
-
C:\Users\Admin\AppData\Local\Temp\cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e.exe"C:\Users\Admin\AppData\Local\Temp\cffa6cd79c31a59374df4cae97329e54a24c482bb71b04134be78dff7fb4159e.exe"1⤵PID:4020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 4842⤵
- Program crash
PID:3760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4020 -ip 40201⤵PID:2040